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(54) DATA MULTIPLEXER, PROGRAM DISTRIBUTION SYSTEM, PROGRAM TRANSMISSION 
SYSTEM, TOLL BROADCAST SYSTEM, PROGRAM TRANSMISSION METHOD, LIMITED 
RECEIVING SYSTEM, AND DATA RECEIVER 

(57) In a data multiplexing device which multiplexes 
and transmits the transport stream packets of program 
data consisting of a plurality of data elements con- 
structed in the form of transport stream packets, a pro- 
gram distribution system, a program transmission 
system, a pay broadcast system, a program transmis- 
sion method, a conditional access system, and a data 
reception device according to the present invention, by 
generating a scramble key Ks corresponding to one or 
more data elements among the plurality of data ele- 
ments constituting a program and by scrambling each 
data element, an audience can subscribe for each data 
element. 



Program 
number 


Video 


Hain 
Audio 


Sub 
Audio 


Private 


1 


Ks 1 






2 


Ks 2 


Ks3 


Ks4 


3 


Ks 5 


Ks6 






4 


Ks 7 


Ks 8 


Ks 9 


Ks 10 


5 


Ks 1 1 


6 


Ksl2 1 




7 


Ks 13 


Ks 14 


8 


Ksl5 




9 


Ksl6 1 Ksl7 1 KslS 


Ks 19 



FIG. 2 



o 
o 
<J> 

CM 
CM 



Q. 

LU 



Printed by Xerox (UK5 Business Services 
2.16.7 (HRS)/3.6 



1 



EP 1 022 900 A1 



2 



Description 
Teclinical Field 

[0001 ] The present invention relates to a data multi- 
plexing device, a program distribution system, a pro- 
gram transmission system, a pay broadcast system, a 
program transmission method, a conditional access 
system, and a data reception device and is preferably 
applied to, for example, a data multiplexing device and a 
data reception device for a digital broadcast system 
which performs compression-coding and multiplexing of 
video data and audio data for transmission. 

Background Art 

[0002] Recently a digital broadcast system has 
been proposed which uses MPEG2 (Moving Picture 
Experts Group Phase 2) to compress and encode video 
data and audio data and then broadcasts encoded 
streams of data over a ground wave or a satellite wave. 
This digital broadcast system generates a plurality of 
transport packets for a plurality of programs each con- 
sisting of encoded video streams and encoded audio 
streams by dividing elementary data such as video data 
or audio data of each program into a predetermined 
number of bytes and appending a header to the begin- 
ning of each block of divided data. Then these transport 
packets are multiplexed to broadcast them over a 
ground wave or a satellite wave. 
[0003] When a reception device receives transmit- 
ted data, that is. multiplexed transport packets, it can 
obtain the encoded video streams and encoded audio 
streams of each program by reading out the header 
information of each transport packets from the received 
data and restoring the original unmultiplexed elemen- 
tary data based on the header information. 
[0004] In such a digital broadcast system, a pro- 
gram generally consists of a plurality of data elements 
(video data and audio data for a plurality of channels). 
Therefore, for such a digital broadcast system, it is 
desirable that an audience should subscribe for each 
data element contained in a program. For example, sup- 
pose that a program consists of a total of four types of 
data elements, that is, video data, main audio data, sub- 
audio data, and additional data. For a prior digital broad- 
cast system, an audience had to subscribe for each 
program, that is, all of six data elements. Accordingly, 
even if a recipient wanted to subscribe only for video 
data and main audio data, he or she had to subscribe 
for also unnecessary elements (subaudio and additional 
data). 

[0005] Moreover, since a prior scramble device was 

used before multiplexing, the apparatus must include a 
scramble device for each program and was unavoidably 
made large. 

[0006] In addition, a prior digital broadcast system 
multiplexed program subscription information and cryp- 



tanalytic keys into programs at certain intervals and 
then transmitted them. Since the highest bit rate of mul- 
tiplexed streams is limited, the transmission rate may 
not be sufficiently high for a program due to the trans- 
5 mission of such program subscription information and 
cryptanalytic keys. Therefore, there was a problem that 
if a sufficient transmission rate could not be ensured, a 
transmission buffer for buffering any program data might 
overflow. 

10 

Disclosure of the Invention 

[0007] The present invention has been devised in 
light of the foregoing and proposes a digital broadcast 
15 system which allows a recipient to receive only neces- 
sary data elements among the data elements constitut- 
ing a program, that is, which can scramble each data 
element. 

[0008] The present invention proposes a digital 
20 broadcast system which can minimize the device con- 
figuration by avoiding provision of a scramble device for 
each program. 

[0009] The present invention proposes a digital 
broadcast system which can avoid any overflow from a 

25 transmission buffer for buffering any program data. 
[001 0] In order to solve such problems, the present 
invention provides a data multiplexing device which mul- 
tiplexes and transmits the transport stream packets of 
program data consisting of a plurality of data elements 

30 constructed in the form of transport stream packets. The 
data multiplexing device comprises a scramble key gen- 
eration means for generating a scramble key corre- 
sponding to a data element and a scramble means for 
scrambling the corresponding transport stream packet 

35 of data element by using a scramble key generated by 
the scramble key generation means, so that the data 
multiplexing device may generate a scramble key corre- 
sponding to one or more data elements among the plu- 
rality of data elements constituting a program and 

40 scramble each data element. 

[0011] By scrambling each data element, an audi- 
ence can subscribe for each data element. 
[0012] The present invention provides a program 
distribution system for distributing a program consisting 

45 of a plurality of data elements, which not only manages 
subscribers' subscriptions for each program or data ele- 
ment through a subscriber management system but 
generates for each data element a scramble key used 
for descrambling the data elements contained in the 

50 program and based on the generated scramble key 
selectively scrambles each data element with respect to 
encoded data elements contained in a multiplexed 
stream, so that an audience can subscribe for each data 
element. 

55 [0013] The present invention provides a program 
transmitting system for transmission a program consist- 
ing of a plurality of data elements, which in order for a 
subscriber to watch and/or hear only programs and data 
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elements for which the subscriber has subscribed, gen- 
erates a plurality of scramble keys used for scrambling 
the plurality of data elements contained in the program, 
selectively scrambles each data element based on the 
generated scramble key, and multiplexes the scrambled 
data elements for transmission, so that an audience can 
subscribe for each data element and descramble only 
thus subscribed data elements to watch and/or hear 
them. 

[0014] The present invention provides a pay broad- 
cast system for broadcasting a program consisting of a 
plurality of data elements, which not only manages sub- 
scribers' subscriptions for each program or data ele- 
ment through a subscriber management system but 
generates for each data element a scramble key used 
for descrambling the data elements contained in the 
program and based on the generated scramble key, 
selectively scrambles each data element with respect to 
encoded data elements contained in a multiplexed 
stream, so that an audience can subscribe for each data 
element. 

[001 5] The present invention provides a conditional 
access system for providing a conditional access to only 
subscribed programs or data elements among a plural- 
ity of programs distributed by a program distribution sys- 
tem or a plurality of data elements constituting the 
programs, which, from a plurality of transport stream 
packets containing a plurality of encryption scramble 
keys, filters any transport stream packet containing an 
encryption scramble key associated with a program or 
data element subscribed for by a recipient, deciphers 
the plurality of encryption scramble keys contained in 
the plurality of filtered transport stream packets, gener- 
ates a plurality of deciphered scramble keys, and 
descrambles each data element by using a plurality of 
deciphered scramble keys corresponding to a plurality 
of data elements, so that an audience can subscribe for 
each data element and descramble only thus sub- 
scribed data elements to watch and/or hear them. 
[0016] According to the present invention, by 
scrambling each multiplexed transport stream packet 
with the respectively corresponding scramble key, the 
circuit configuration for scrambling can be made simpler 
than that for scrambling each transport stream packet 
before multiplexing. 

[0017] The present invention comprises a plurality 
of buffer memories which store a plurality of data pack- 
ets constituting a plurality of data elements, a multiplex- 
ing means which has a switch means for switching the 
buffer memories and which time-division multiplexes a 
plurality of packet data strings to provide an output by 
sequentially time-division switching the buffer memories 
with the switch means, and a switch control means 
which selects, according to an input rate for the packet 
data strings, the plurality of buffer memories switchable 
by the switch means. Accordingly, any overflow from a 
buffer memory for buffering higher priority data ele- 
ments can be avoided by switchably controlling the 



switch means to exclude a buffer memory for buffering 
lower priority information among the plurality of buffer 
memories, when the input rate is higher than a refer- 
ence rate. 

5 [001 8] The present invention provides a data recep- 
tion device for receiving multiplexed data obtained by 
multiplexing the transport stream packets of program 
data consisting of a plurality of data elements con- 
structed in the form of transport stream packets, which 

10 comprises a scramble key extract means for extracting 
from the multiplexed data a scramble key corresponding 
to each data element and a descramble means for 
descrambling the transport stream packet for each data 
element contained in the multiplexed data by using a 

15 scramble key extracted by the scramble key extract 
means, so that each data element can be descrambled 
separately by descrambling the transport stream packet 
for each data element corresponding to a scramble key 
by using the scramble key 

20 

Brief Description of the Drawings 
[0019] 



25 Figure 1 is a block diagram showing the configura- 
tion of a digital broadcast system according to the 
present invention; 

Figure 2 is a schematic diagram showing the corre- 
spondence between elementary data contained in 

30 each program and scramble keys; 

Figure 3 is a schematic diagram showing the corre- 
spondence between information to be recorded in 
transport stream packets and their PID values; 
Figure 4 is a schematic diagram showing the corre- 

35 spondence between transport packet types and 
their PID values; 

Figure 5 is a block diagram showing the configura- 
tion of an encoding system; 
Figure 6 is a schematic diagram showing the syntax 
40 for a transport packet; 

Figure 7 is a schematic diagram showing the syntax 
for a transport packet; 

Figure 8 is a schematic diagram showing the syntax 
for a transport packet; 
45 Figure 9 is a schematic diagram showing the syntax 
for a transport packet; 

Figure 10 is a block diagram showing the configura- 
tion of a multiplexer system; 
Figure 11 is a schematic diagram showing the cor- 

50 respondence between each table and its PID; 

Figure 1 2 is a schematic diagram showing the syn- 
tax for a program association section; 
Figure 13 is a schematic diagram showing the syn- 
tax for a program association section; 

55 Figure 14 is a schematic diagram showing the cor- 
respondence between each section and its PID 
value; 

Figure 15 is a schematic diagram showing the syn- 
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tax for a program map section; 
Figure 16 is a schematic diagram showing the syn- 
tax for a program map section; 
Figure 1 7 is a schematic diagram showing the syn- 
tax for a conditional access section; s 
Figure 18 is a schematic diagram showing the syn- 
tax for a conditional access section; 
Figure 1 9 is a schematic diagram showing the syn- 
tax for a conditional access descriptor; 
Figure 20 is a schematic diagram showing the PIDs io 
of elementary data expressed by each table and 
the contents of the descriptors; 
Figure 21 is a schematic diagram showing the data 
configuration for EMM packets; 
Figure 22 is a schematic diagram showing the data is 
configuration for ECM packets; and 
Figure 23 is a block diagram showing the configura- 
tion of a reception device. 

Best Mode Ibr Carrying Out the Invention 20 

[0020] Now, an embodiment of the present inven- 
tion is described below with reference to the drawings. 
[0021] Referring to Figure 1 . a data broadcast sys- 
tem to which a data multiplexing device according to the 25 
present invention is applied, is described. 
[0022] This data broadcast system is a system 
used for a pay broadcast system such as a satellite dig- 
ital broadcast system or a ground wave digital broad- 
cast system and as shown in Figure 1, comprises a 30 
broadcast data processing system BDPS 
(Broadcast_Data_Processing_System) 1 . a subscriber 
management system SMS 

(Subscriber_Management_System) 2, a subscriber 
authorization system SAS 35 

(Subscriber_Authorization_System) 3, an EPG 
(Electronic_Program_Guide) system 4, a server system 
5, a routing system 6, an encoding system 7, a multi- 
plexer system 8, an encoder/multiplexer control unit 9, 
and a modulation circuit 10. 40 
[0023] The broadcast data processing system 1 is a 
system for controlling all systems and devices provided 
within a broadcast station such as the subscriber man- 
agement system 2, the subscriber authorization system 
3, the EPG system 4, the server system 5, the routing 45 
system 6, the encoding system 7, the multiplexer sys- 
tem 8, the encoder/multiplexer control unit 9, and the 
modulation circuit 10. This broadcast data processing 
system 1 has program planning tables registered with 
itself, which are used for managing air times for every so 
material including program and promotion materials 
supplied by program suppliers and program and CM 
materials produced by the station itself. The broadcast 
data processing system 1 controls each device and sys- 
tem according to the program planning tables. Such a 55 
program planning table consists of a service information 
file which contains information for program suppliers, an 
event information file which contains program sched- 



ules recorded on a one-hour or one-day basis, and an 
operation information file which contains program time 
schedules recorded on a 15-sec basis. 
[0024] The subscriber management system 2 is a 
system used for managing subscriber management 
information such as subscriber registration information 
and tolling information. Specifically, the subscriber man- 
agement system 2 is a core system in a pay broadcast 
system, which has major functions such as subscrip- 
tion, accounting, and billing. In addition, the subscriber 
management system 2 has another function for manag- 
ing information on keys such as a scramble key Ks for 
scrambling a data element and a work key Kw for enci- 
phering such a scramble key Ks as well as information 
on broadcast contractors, program suppliers, and pro- 
gramming agencies. The subscriber management sys- 
tem 2 has still another function for processing, in real 
time, audience information supplied by an IRD provided 
at the receiving end through a telephone line. The sub- 
scriber management system 2 eventually provides to 
the subscriber authorization system 3 described later, 
some EMM (Entitlement_Management_Message) data 
which contains information on subscription as well as a 
work key Kw. Such EMM data will be described later in 
detail. 

[0025] The subscriber authorization system 3 gen- 
erates an enciphered work key Kw' by enciphering a 
work key Kw contained in the EMM data received from 
the subscriber management system 2 through a prede- 
termined encryption algorithm using a master key Km. It 
should be appreciated that an encryption algorithm 
used for a digital broadcast system according to the 
present invention is an encryption algorithm called 
CRYPS (a trademark of SONY) developed by the 
present applicant, which adopts a block encryption 
technique similar to the DES system established by the 
Department of Commerce. The subscriber authoriza- 
tion system 3 replaces a work key Kw contained in the 
EMM data supplied by the subscriber management sys- 
tem 2 with a work key Kw' enciphered through the 
encryption algorithm CRYPS and then generates thus 
enciphered EMM data. In order to transmit such EMM 
data enciphered through the present applicant's unique 
encryption algorithm via satellites, the subscriber 
authorization system 3 translates the enciphered EMM 
data into transport stream packets by inserting the enci- 
phered EMM data in the payload section of a transport 
stream packet. In the following description, a transport 
stream packet containing such EMM data will be 
referred to as an EMM packet. It should be also appre- 
ciated that the subscriber authorization system 3 
receives a PID (packet identifier) given to such an EMM 
packet from the encoder/multiplexer control unit 9 
described later over a network. 
[0026] The subscriber authorization system 3 has a 
work key table in which 256 work keys (Kw) are associ- 
ated with work key identification numbers (Kw_No) for 
identifying these work keys and this work key table can 
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be downloaded into memory of the multiplexer system 8 
over a network. The reason why such a work key table 
is downloaded into the multiplexer system 8 is that the 
multiplexer system 8 obtains an unenciphered work key 
Kw from the work key identification numbers (Kw_No) 5 
because only enciphered work keys Kw' are transmitted 
by the subscriber authorization system 3 to the multi- 
plexer system 8. 

[0027] Moreover, the subscriber authorization sys- 
tem 3 generates a scramble key Ks to scramble each 10 
data element contained in a transmitted program. In this 
regard, the subscriber authorization system 3 gener- 
ates a different scramble key Ks for each program or for 
each data element contained therein. For example, as 
shown in Figure 2, a scramble key Ks1 is generated for is 
scrambling the video data and main audio data consti- 
tuting the first program, respectively a scramble key 
Ks2 is generated for scrambling the video data and 
main audio data constituting the second program, a 
scramble key Ks3 is generated for scrambling the sub- 20 
audio data of the second program, and a scramble key 
Ks4 is generated for scrambling the private data of the 
second program. Which scramble key is assigned to 
which element of which program can be determined by 
the subscriber authorization system 3 arbitrarily, 25 
depending on the content of the program. For example, 
as with the fourth program, different scramble keys Ks7 
through KslO can be assigned to the video data, main 
audio data, subaudio data, and private data, respec- 
tively, or as with the fifth program, the same scramble 30 
key Ks1 1 can be assigned to all the video data, main 
audio data, subaudio data, and private data. 
[0028] Moreover, in order to enhance the security 
level of the encryption/decryption system used for the 
digital broadcast system, the subscriber authorization 35 
system 3 updates these scramble keys Ks1 through 
Ks19 at intervals of 4 seconds with a random number 
generator within the subscriber authorization system 3. 
[0029] In addition, the subscriber authorization sys- 
tem 3 generates a plurality of ECM 40 
(Entitlement_Control_Message) data items used for 
descrambling. This ECM data consists of a work key 
number for specifying at least a work key Kw listed in 
the work key table, a scramble key Ks for scrambling 
data streams, and a CA_system_ID for identifying the 45 
subscriber authorization system 3. Therefore, in the 
example where 19 scramble keys Ks1 through Ks19 are 
used as shown in Figure 2, the subscriber authorization 
system 3 generates 1 9 ECM data items, because only a 
scramble key is registered with an ECM data item. so 
[0030] In order to transmit such a plurality of gener- 
ated ECM data items, the subscriber authorization sys- 
tem 3 further translates the plurality of ECM data items 
into transport stream packets by inserting the plurality of 
ECM data items in the payload section of a transport 55 
stream packet. In the following description, a transport 
stream packet containing such ECM data will be 
referred to as an ECM packet. In Figure 1, the term 



ECM1 shows an ECM packet containing the scramble 
key Ks1 , the term ECM2 shows an ECM packet contain- 
ing the scramble key Ks2, and similarly the terms 
ECM3 through ECM19 show ECM packets containing 
the scramble keys KsS through Ks19, respectively. It 
should be also appreciated that the subscriber authori- 
zation system 3 receives a PID (packet identifier) given 
to each of the plurality of ECM packets from the 
encoder/multiplexer control unit 9 described later over a 
network. It should be further appreciated that in Figure 
1 , the ECM packets are shown to be supplied directly to 
the multiplexer system but this is only for the sake of 
clarity and in fact the ECM packets will be supplied to 
the multiplexer system 8 via a network and the 
encoder/multiplexer control unit 9. 
[0031] Now, why the above-mentioned work keys 
and scramble keys are to be used for the digital broad- 
cast system is described below. 
[0032] A typical digital broadcast system generally 
uses a pay broadcast system which authorizes only 
subscribers to watch and/or hear the programs and 
sends accounts to those subscribers based on their 
subscription conditions. To accomplish a pay broadcast 
system, such a digital broadcast system must scramble 
programs with scramble keys generated by the broad- 
cast station before transmission and allow only sub- 
scribers to descramble the programs to watch and/or 
hear them. Specifically in order to allow only subscrib- 
ers to descramble such scrambled data elements at the 
receiver end, scramble keys Ks used in scrambling must 
be used also for descrambling. To automatically 
descramble programs transmitted via satellites, these 
scramble keys Ks must be transmitted to the receiver 
end. 

[0033] However, if these scrambi e keys Ks are to be 
transmitted to the receiver end, an unauthorized recipi- 
ent may be able to obtain these scramble keys Ks and 
consequently to watch and/or hear all transmitted pro- 
grams free of charge. Therefore, at the first level of 
security, the pay broadcast system according to the 
present invention changes these scramble keys Ks at 
intervals of several seconds with a random number gen- 
erator and enciphers these scramble keys Ks with work 
keys Kw. The encryption of scramble keys Ks with a ran- 
dom number generator can be accomplished by soft- 
ware and therefore, can provide a much higher level of 
security for the encryption technique. 
[0034] To further enhance the security level of a 
conditional access system, the digital broadcast system 
according to the present invention enciphers these 
scramble keys Ks by using work keys Kw in an encryp- 
tion circuit 822 of the multiplexer system 8 which is 
described later and then transmits enciphered scramble 
keys Ks' to the receiver end. That is, the security level 
can be enhanced to the utmost by transmitting enci- 
phered scramble keys Ks rather than by transmitting the 
scramble keys Ks themselves used in scrambling pro- 
grams. At the receiver end, a decrypter for deciphering 
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the enciphered scramble keys Ks' is provided in a secu- 
rity module (IC card) in the receiver and all decryption 
operations are performed in the security module. The 
security module composed of an IC card has such a 
structure that the program code contained therein can- 
not be decoded in effect and therefore, it may be quite 
difficult for an outsider to decipher the scramble keys. 
[0035] The EPG system 4 is a system to create pro- 
gram guide data associated with transmitted programs. 
Program guide data (EGP data) refers to, for example, 
data for informing air times of programs to be broad- 
casted in future, character data for explaining the con- 
tents of selected programs, and title data for programs. 
The EPG data may be created mainly by the broadcast 
station or a program supplier may create special EPG 
data for its own programs. 

[0036] The server system 5 consists of a server 
constructed by connecting disk drives containing vari- 
ous materials into an array and a server control compu- 
ter for controlling the recording/playback operations of 
the server. The server system 5 is connected to the 
broadcast data processing system 1 through the LAN in 
the broadcast station such as Ethernet, so that it can be 
controlled to transmit programs according to a program 
planning list of the program data processing system. 
The server system 5 has several server functions corre- 
sponding to the types of materials recorded therein, 
such as a CM server function for supplying CM materi- 
als, a daily server function for supplying television pro- 
gram materials and news program materials, and a 
video-on-demand (VOD) server function for supplying 
television program materials and movie materials, and 
can provide a plurality of desired programs over a cer- 
tain channel under the control of the broadcast data 
processing system 1 . 

[0037] The routing system 6 is a system for routing 
multichannel data supplied by the server system 5 to 
appropriate channels. The routing system 6 is con- 
nected to the broadcast data processing system 1 
through Ethernet, so that it can be controlled to transmit 
programs over appropriate channels according to a pro- 
gram planning list of the program data processing sys- 
tem. 

[0038] The encoder/multiplexer control unit 9 sup- 
plies control commands to control the encoding system 
7 and the multiplexer system 8 to the encoding system 
7 and the multiplexer system 8 via a network. The 
encoder/multiplexer control unit 9 receives an EPG 
packet from the EPG system 4 via the network as well 
as ECM packets (ECM1 through ECMig) and an EMM' 
packet from the subscriber authorization system 3 via 
the network and then supplies the received EPG, EMM', 
and ECM packets to the multiplexer system 8. In addi- 
tion, the encoder/multiplexer control unit 9 supplies pri- 
vate data to the encoding system 7 as well as program 
specific information (PSI: 

Program_Specif ic_lnformation) to the multiplexer 8. 
[0039] Program specific information PSI consists of 



a program association table (PAT: 
Program_Association_Table) for showing a specified 
program number and its corresponding transport 
stream packet in a program map table (PMT), a program 

5 map table (PMT: Program_Map_Table) for showing a 
transport stream packet in which data elements for the 
specified program are described, and a conditional 
access table (CAT: Conditional_Access_Table) for 
specifying a transport stream packet containing EMM 

w data. The encoder/multiplexer control unit 9 generates a 
program association table PAT, a program map table 
PMT, and a conditional access table CAT and provides 
these generated tables in the form of a transport 
stream. In the following description, a transport stream 

15 packet containing such a program association table PAT 
will be referred to as a PAT packet, a transport stream 
packet containing such a program map table PMT will 
be referred to as a PMT packet, and a transport stream 
packet containing such a conditional access table CAT 

20 will be referred to as a CAT packet. 

[0040] In order to assign appropriate packet identifi- 
ers PID to transport stream packets created by the EPG 
system 4, the subscriber authorization system 3, and 
the encoding system 7, the encoder/multiplexer control 

25 unit 9 generates the appropriate packet identifiers PID 
and supplies them to the subscriber authorization sys- 
tem 3, the EPG system 4, and the encoding system 7. 
[0041] A packet identifier (PID: Packet Identifica- 
tion) is an identifier for identifying a transport stream 

30 packet. Such a packet identifier PID is unique data of 1 3 
bits determined according to the type of data stored in 
the payload of a transport stream packet. For example, 
as shown in Figure 3, a PID value of "0x0000" is speci- 
fied for a transport stream packet which stores informa- 

35 tion on a program association table PAT in its payload, 
and a PID value of "0x0001 " is specified for a transport 
stream packet which stores information on a conditional 
access table CAT in its payload. One of the PID values 
"0x0020" through "0x1 FFE" is selected as a PID value 

40 for a transport stream packet which stores information 
on a program map table PMT or elementary data such 
as video data and audio data in its payload. 
[0042] When generating a PID to be assigned to 
each transport stream packet, the encoder/multiplexer 

45 control unit 9 generates a PID table showing the corre- 
spondence between PIDs specified for transport stream 
packets and scramble keys Ks used for scrambling. The 
PID table is a table for storing the previously used PID 
values and by referring to the PID values stored in the 

50 PID table, the encoder/multiplexer control unit 9 can 
determine whether a PID value has been used previ- 
ously and generate a new PID value which is not a 
duplicate of any previous PID value. The PID table is 
used also for determining whether a multiplexed trans- 

55 port stream packet should be scrambled. 

[0043] For example, as shown in Figure 4, the PID 
table shows the correspondence between PIDs speci- 
fied for generated transport stream packets and scram- 
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ble keys Ks used for data stored in the corresponding 
transport stream packets. In Figure 4, a PID value for 
PAT packets is fixed to "0x0000", a PID value specified 
for PMT packets corresponding to the first program is 
"0x0100", a PID value specified for PMT packets corre- 
sponding to the second program is "0x0101", a PID 
value specified for ECM packets with a scramble key 
Ksl for scrambling Video[1] packets used for video data 
of the first program and Main_Audio[1] packets used for 
main audio data is "0x0300", a PID value specified for 
ECM packets with a scramble key Ks2 for scrambling 
Video[2] packets used for video data of the second pro- 
gram is "0x0301", a PID value specified for ECM pack- 
ets with a scramble key Ks2 for scrambling 
Main_Audio[2] packets used for main audio data of the 
second program is "0x0302", a PID value specified for 
ECM packets with a scramble key Ks3 for scrambling 
Sub_Audio[2] packets used for subaudio data of the 
second program is "0x0303", and a PID value specified 
for ECM packets with a scramble key Ks4 for scrambling 
Private[2] packets used for private data of the second 
program is "0x0304". A PID value specified for Video[1] 
packets used for video data of the first program is 
"0x0500" and this type of packets are scrambled with a 
scramble key Ksl. A PID value specified for 
Main_Audio[1] packets used for main audio data of the 
first program is "0x0501" and this type of packets are 
scrambled with a scramble key Ksl . A PID value speci- 
fied for Video[2] packets used for video data of the sec- 
ond program is "0x0502" and this type of packets are 
scrambled with a scramble key Ks2. A PID value speci- 
fied for CAT packets is fixed to "0x0001 " and a PID value 
specified for EMM packets is "0x700". 
[0044] As shown in Figure 5, the encoding system 7 
comprises a plurality of MPEG video encoders 711V 
through 719V for encoding video data supplied over a 
plurality of channels according to the MPEG2 standard, 
MPEG audio encoders 71 1 Athrough 719A for encoding 
a plurality of audio data streams corresponding to the 
video data streams according to the MPEG2 standard, 
multiplexing circuits 721 through 729 for multiplexing 
streams supplied by each video encoder and each 
audio encoder and private data streams supplied by the 
encoder/multiplexer control unit 9, and an encoding 
controller 70 for controlling the video/audio encoders 
711 through 719 and the multiplexing circuits 721 
through 729. It should be appreciated that the encoding 
system as shown in Figure 5 is configured to encode 
programs for 9 channels but, of course, it may handle 
not only 9 channels but any number of channels. 
[0045] Each of the video encoders 711V through 
719V generates encoded bit streams by encoding video 
data according to the MPEG2 standard. Then the video 
encoder generates PES (Packetized Elementary 
Stream) packets by dividing an encoded bit stream in 
picture units and appending a header to the divided bit 
stream. Next, the video encoder generates transport 
stream packets by dividing a PES packet in 184 bytes 



and appending a header of 4 bytes to the divided bit 
stream of 1 84 bytes. Data consisting of transport stream 
packets arranged in a stream is called a transport 
stream. In generating transport stream packets, the 

5 encoder/multiplexer control unit 9 supplies to each of 
the video encoders 71 IV through 719V a packet identi- 
fier (PID) for identifying a transport stream packet con- 
taining the encoded video data. 
[0046] Each of the audio encoders 711 A through 

10 719A generates encoded bit streams by encoding main 
audio data and subaudio data according to the MPEGi2 
standard. Like the video encoders, each of the audio 
encoders 711 A through 719A generates PES packets 
from the bit streams and then generates transport 

15 Stream packets containing audio data by dividing a PES 
packet in 1 84 bytes and appending a header of 4 bytes. 
In generating transport stream packets, the 
encoder/multiplexer control unit 9 supplies to each of 
the audio encoders 71 1 A through 71 9A a packet identi- 

20 tier (PID) tor identifying a transport stream packet con- 
taining the encoded audio data. 
[0047] Each of the multiplexing circuits 721 through 
729 generates a transport stream by multiplexing a 
transport stream containing encoded video data, a 

25 transport stream containing encoded audio data, and a 
transport stream containing private data. Specifically 
the multiplexing circuit multiplexes these streams by 
switching between the transport stream containing 
encoded video data, the transport stream containing 

30 encoded audio data, and the transport stream contain- 
ing private data in units of transport stream packets. 
Therefore, in an output transport stream, transport 
stream packets containing encoded video data, trans- 
port stream packets containing encoded audio data, 

35 and transport stream packets containing private data 
are intermingled. In this regard, private data is placed in 
a transport stream packet by the encoding controller 70 
and then supplied to each of the multiplexing circuits 
through a network. 

40 [0048] The encoding controller 70 specifies an 
appropriate encoding bit rate for each of the video and 
audio encoders. For example, the encoding controller 
70 assigns a higher bit rate to an encoder for encoding 
a program such as sports which requires more encoded 

45 bits and assigns a lower bit rate to an encoder for 
encoding a program such as news which may generate 
fewer encoded bits. That is, it grasps a complexity 
(which is used as an index of how many bits are gener- 
ated by encoding) of video data for each channel rela- 

50 tive to the other channels and then assigns the highest 
bit rate to a channel for video data of the highest com- 
plexity and assigns other lower bit rates in descending 
order. Of course, any assigned bit rate is not program- 
specific and may be changed depending on the com- 

55 plexity of video data in that program. 

[0049] Next, the structure and syntax for this trans- 
port stream packet are described below in detail with 
reference to Figures 6 through 9. 
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[0050] A transport stream packet consists of a 
header of 4 bytes and a payload section of 1 84 bytes for 
storing various types of data and data elements. 
[0051] The header of a transport stream packet 
consists of the following fields: sync_byte, 
transport_error_indicator, payload_unit_start_indicator, 
transport_priority_PID, transport_scrambling_control, 
adaptation_field_control, continuity_counter, and 
adaptationjield. 

[0052] The sync_byte field is a field having a fixed 
length of 8 bits and detects a synchronous pattern in the 
bit stream. This field is defined to have a fixed value of 
"010001 1 1 " (0X47) and can detect a synchronous con- 
dition by detecting this bit pattern in the stream. 
[0053] The transport_error_indicator field is a flag 
of 1 bit and when set to "1 ", indicates that an uncorrect- 
able error of at least 1 bit exists in the transport stream 
packet. 

[0054] The payload_unit_start_indicator field is a 
flag of 1 bit and has a meaning significant to transport 
stream packets which carry video/audio data and other 
elementary data or program specific information (PSI). 
If the payload section of a transport stream packet con- 
tains elementary data, the payload_unit_start_indicator 
field has the following meaning: when the 
payload_unit_start_indicator field is "1", it indicates that 
elementary data is inserted at the beginning of the pay- 
load section of this transport stream packet; when the 
payload_unit_start_indicator field is "0", it indicates that 
elementary data is not inserted at the beginning of the 
payload section of this transport stream packet. If the 
payload_unit_start_indicator field is set to "1". it indi- 
cates that only one PES packet starts at a certain trans- 
port stream packet. On the contrary, if the payload 
section of a transport stream packet contains PSI data, 
the payload_unit_start_indicator field has the following 
meaning: when the transport packet carries the first 
byte of the PSI section, the payload_unit_start_indicator 
field is "1"; when the transport stream packet does not 
carry the first byte of the PSI section, the 
payload_unit_start_indicator field is "0". If the transport 
stream packet is a null packet, the 
payload_unit_start_indicator field is also "0". 
[0055] The transport jDri or ity field is an identifier of 
1 bit for indicating the priority of a transport packet. 
When the transport_priority field is set to "1 this trans- 
port packet is a packet having the same packet identifier 
PID, which indicates that this packet has a higher prior- 
ity than that having the transport_priority field set to a 
value other than "1 ". For example, a certain packet in an 
elementary stream can be assigned a priority by setting 
a packet identifier of the transport _priority field. 
[0056] The transport_scrambling_control field is 
data of 2 bits for indicating the scrambling mode of the 
transport stream packet payload. The scrambling mode 
indicates whether data stored in the payload has been 
scrambled and the type of scramble. It is required by the 
standard that the transport stream packet header and 



the adaptation field should not be scrambled with a 
scramble key Ks. Therefore, by using this 
transport_scrambling_control field, it can be determined 
whether data stored in the transport stream packet pay- 

5 load has been scrambled. 

[0057] The adaptationj ield_control field is data of 
2 bits ibr indicating that an adaptation field and/or pay- 
load is placed at the packet header of this transport 
stream. Specifically, if only payload data is placed at the 

10 packet header, the adaptationj ield_control field is "01 "; 
if only an adaptation field is placed at the packet header, 
the adaptation_field_control field is "10"; if both an 
adaptation field and a payload are placed at the packet 
header, the adaptation_field_control field is "11". 

15 [0058] The continuity_counter field is data for indi- 
cating whether continuously transmitted packets with 
the same PID are partially absent or discarded during 
the transmission. Specifically, the continuity_counter 
field is a field of 4 bits to be incremented each time a 

20 transport stream packet with the same PID is transmit- 
ted. However, it should be appreciated that this 
continuity_counter is counted only when an adaptation 
field is placed at the packet header. 
[0059] The adaptationjield is a field for inserting 

25 additional information on separate streams or stuffing 
bytes as an option. By using this adaptation field, every 
information on dynamic state transitions of separate 
streams can be transmitted together with data. 
[0060] The adaptationjield consists of the follow- 

30 ing fields: adaptationjieldjength, 

discontinuity_counter, random_accessJndicator, 
elementary_streamjDriorityJndicator. PCRJIag, 
OPCRJIag; spl icing jDointJIag, splicingLpoirrt, 
transport_private_dataJlag, 

35 adaptation Jield_extensionJlag, 

program_clock_ref erence (PGR) , 

original_program_clock_reference (OPCR) , 

spl ice_cou ntdown , transport_pri vate_data J ength , 
private_data, adaptation Jield_extension J ength, 

40 ItwJIag (legaLtime_window flag), piecewise_ratejlag, 
and seamless_splicejlag. 

[0061] The adaptationjieldjength field is data 
indicating the number of bytes of an adaptation field fol- 
lowing this adaptationjieldjength field. If the 

45 adaptation Jield_control field is "11", the 
adaptationjieldjength is 0 through 182 bits; if the 
adaptation Jield_control is "10", the 
adaptationjieldjength is 183 bits. It should be appreci- 
ated that stuffing is required to fill in with some bits when 

50 elementary streams are not enough to fill in the payload 
of a transport stream. 

[0062] The discontinuity_counter field is data indi- 
cating whether a system dock reference (SCR) is reset 
in the middle of a plurality of packets with the same PID 
55 to be discontinuous. If the system clock reference is dis- 
continuous, this discontinuity_counter field is "1"; if the 
system clock reference is still continuous, this 
discontinuity_counter field is "0". It should be appreci- 
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ated that the system clock reference is reference infor- 
mation which an MPEG decoder for decoding video and 
audio data uses to set a system time clock for the 
decoder to a timing value intended by the encoder. 
[0063] The random_accessJndicator field is data s 
indicating the beginning of a video sequence header or 
an audio frame. That is, this random_accessJndicator 
field is data indicating art access point (which is the 
beginning of a frame) for video or audio data when data 
elements are accessed randomly io 
[0064] The elementary_streamjDriority_indicator 
field is data indicating the priority of elementary stream 
data carried in the payload of this transport stream 
packet in packets with the same PID. For example, 
when video data of an elementary stream is intra- is 
coded, the elementary_stream_priorityJndicator field is 
set to "1". On the contrary, the 
elementary_streamjDriority_indicator of a transport 
stream containing inter-coded video data is set to "0". 
[0065] The PCRJIag field is data indicating 20 
whether PGR (program_clock_reference) data exists in 
an adaptation field. If PGR data exists in the adaptation 
field, the PGRJIag field is set to "1"; if no PGR data 
exists, the PGRJIag field is set to "0". It should be 
appreciated that the PGR data is used by a decoder at 25 
the receiver end to obtain a proper timing of a decoding 
operation for decoding transmitted data. 
[0066] The OPGRJIag field is data indicating 
whether OPGR (original_program_clock_reference) 
data exists in an adaptation field. If OPGR data exists in 30 
the adaptation field, the OPGRJIag field is set to "1"; if 
no OPGR data exists, the OPGRJIag field is set to "0". 
It should be appreciated that the OPGR data is used by 
a splicing operation to reconstruct a transport stream 
from a plurality of original transport streams and indi- 35 
cates PGR data for an original transport stream. 
[0067] The splicing_pointJlag field is data indicat- 
ing whether splice_countdown data exists in an adapta- 
tion field to show an edit point (splice point] at the 
transport level. If splice_countdown data exists in the 40 
adaptation field, the splicing jDointJIag field is "1"; if no 
splice_countdown data exists in the adaptation field, the 
splicing_pointJlag field is "0". 

[0068] The transport J3ri vat e_data J lag field is data 
indicating whether private data used to describe certain 45 
user data exists in an adaptation field. If private data 
exists in the adaptation field, the 
transport jDrivate_dataJlag field is set to "1"; if no pri- 
vate data exists in the adaptation field, the 
transport jDrivate_dataJlag field is set to "0". so 
[0069] The adaptationJield_extensionJlag field is 
data indicating whether an extension field exists in an 
adaptation field. If an extension field exists in the adap- 
tation field, the adaptation Jield_extensionJlag field is 
set to "1"; if no extension field exists in the adaptation ss 
field, the adaptation Jield_extensionJlag field is set to 
"0". 

[0070] The program_clock_reference (PGR) is a 



reference clock to be referenced when the clock at the 
receiver end is made in phase with the clock at the 
transmitting end. This PGR data contains time data 
when each transport packet is generated. The PGR 
data is 42 bits long, consisting of 
program_clock_reference_base of 33 bits and 
program_clock_reference_extension of 9 bits. 24 hours 
can be counted by counting the system clock in the 
range of 0 through 299 with the 
program_clock_reference_extension and adding a bit to 
the program_clock_referece_base with a carry gener- 
ated when the count 299 is reset to 0. 
[0071 ] The original_program_clock_reference 
(OPGR) field is data used to reconstruct a single pro- 
gram transport stream from certain transport streams. 
When such a single program transport stream is com- 
pletely reconstructed, the 
originaljDrogram_clock_reference is copied into the 
program_clock_reference field. 
[0072] The splice_countdown field is data indicating 
the number of packets necessary to reach an editable 
(spliceable) point at the transport stream packet level in 
transport stream packets with the same PID. Therefore, 
a transport stream packet at an editable splicing point 
has the splice_countdown field set to "0". In a transport 
packet with the splice_countdown field set to "0", the 
last byte of the transport stream packet payload can be 
spliced by relocating it to the last byte of an encoded 
picture. 

[0073] In this regard, a splicing operation is per- 
formed to concatenate two different elementary streams 
at the transport level to form a new transport stream. 
Splicing operations can be divided into two types: a 
seamless splice with no discontinuity of decoding and a 
nonseamless splice with a discontinuity of decoding. 
The case where no discontinuity of decoding occurs 
means that the decoding time for an access unit of a 
newly added stream is consistent with the decoding 
time for an access unit of an old stream before splicing. 
On the contrary, the case where a discontinuity of 
decoding occurs means that the decoding time for an 
access unit of a newly added stream is inconsistent with 
the decoding time for an access unit of an old stream 
before splicing. 

[0074] The transportjDrivate_dataJength field is 
data indicating the number of bytes of private data in an 
adaptation field. 

[0075] The private_data is a field which is not 
required specifically by the standard but can be used to 
describe certain user data in an adaptation field. 
[0076] The adaptationJield_extensionJength field 
is data indicating the length of adaptation field extension 
data in an adaptation field. 

[0077] The ItwJIag (legalJime_windowJlag) field 
is data indicating whether ltw_offset data showing an 
offset value of the display window exists in an adapta- 
tion field. 

[0078] The piecewise_ratejlag field is data indicat- 
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ing whether piecewise_rate data exists in an adaptation 
field. 

[0079] The seamless_splice_flag field is data indi- 
cating whether the splicing point is a normal splicing 
point or a seamless splicing point. When the 
seamless_splice_flag field is "0", it indicates that the 
splicing point is a normal splicing point; when the 
seamless_splice_flag field is "1", it indicates that the 
splicing point is a seamless splicing point. A normal 
splicing point means that the splicing point exists at a 
break in PES packets and that the splicing packet 
immediately preceding this splicing point ends at the 
access unit and the next transport packet with the same 
PID begins at the header of a PES packet. On the con- 
trary, a seamless splicing point means that a splicing 
point exists in the middle of a PES packet and that in 
order for the decoding time for an access unit of a newly 
added stream to be consistent with the decoding time 
for an access unit of an old stream before splicing, the 
characteristics of the old stream are partly used as 
those of the new stream. 

[0080] Next, the multiplexer system 8 is described 
below in detail with reference to Figure 10. The multi- 
plexer system 8 is a system which multiplexes a PAT 
packet, a PMT packet, a CAT packet, transport stream 
packets containing encoded elementary data, an EPG 
packet, ECM packets, and an EMM' packet to generate 
a transport stream. 

[0081] Specifically, the multiplexer system 8 com- 
prises a multiplexer controller 81 for controlling all cir- 
cuits within the multiplexer system 8, an encryption 
block 82 for enciphering ECM packets supplied by the 
subscriber authorization system 3, FIFO buffers 841 
through 843 for buffering PAT packets, PMT packets, 
and CAT packets supplied by the encoder/multiplexer 
system 9 as program specific information PSI, respec- 
tively, FIFO buffers 851 through 859 for buffering trans- 
port stream packets containing a plurality of programs, 
respectively, FIFO buffers 861 through 863 for buffering 
ECM packets, EMM packets, and EPG packets, respec- 
tively, an FIFO controller 83 for controlling the read/write 
operations of each FIFO buffer as well as for monitoring 
free area of each FIFO buffer, a multiplexing circuit 87 
for multiplexing transport stream packets supplied by 
the FIFO buffers to generate a multiplexed transport 
stream, and a scramble block 88 for scrambling data 
elements contained in a multiplexed transport stream 
packet. 

[0082] The multiplexer controller 81 receives an 
EPG packet, an EMM' packet, ECM packets (ECM1 
through ECM19), a PAT packet, a PMT packet, and a 
CAT packet from the encoder/multiplexer control unit 9 
and supplies each packet to an appropriate circuit. The 
multiplexer controller 81 receives also a PID table from 
the encoder/multiplexer control unit 9 and supplies it to 
the scramble block 88. 

[0083] The encryption block 82 is a block for enci- 
phering scramble keys Ks contained in a plurality of 



ECM packets supplied by the subscriber authorization 
system 3 through the encoder/multiplexer control unit 9 
and the multiplexer controller 81. The encryption block 
82 has a RAM 821 for storing a work key table down- 

5 loaded from the subscriber authorization system 3 
before the encryption operation and an encrypter 822 
for enciphering the scramble keys Ks contained in the 
ECMs based on work keys Kw. 
[0084] Now, the encryption operation of the encryp- 

10 tion block 82 is described below by explaining, by way of 
example, the case where a scramble key Ks1 for scram- 
bling elementary data constituting the first program is to 
be enciphered. First, a work key number Kw_No con- 
tained in an ECM packet ECM1 is supplied to the RAM 

15 821 . The RAM 821 stores a work key table downloaded 
from the subscriber authorization system, which shows 
the correspondence between work key numbers Kw_No 
and work keys Kw. Since the work key number Kw_No 
contained in the packet ECM1 is supplied to the RAM 

20 821 , a work key Kw corresponding to the supplied work 
key number Kw_No is provided by the RAM 821. The 
encryption circuit 822 receives an ECM packet contain- 
ing a scramble key Ksl and also receives a work key Kw 
from the RAM 821 . The encryption circuit 822 enciphers 

25 the scramble key Ks1 contained in the source ECM with 
the work key Kw and then generates an enciphered 
scramble key Ks1'. The encryption circuit 822 accumu- 
lates the enciphered scramble key Ksl' rather than the 
unenciphered scramble key Ks in the source ECM and 

30 provides as an enciphered ECM packet a transport 
stream packet containing the enciphered scramble key 
Ksl'. It should be appreciated that the encryption algo- 
rithm is the same as that used at the subscriber author- 
ization system 3 for enciphering work keys Kw 

35 contained in EMM data, that is, the encryption algorithm 
CRYSP 

[0085] The encryption block 82 supplies to the 
scramble block 88 a scramble key Ksl which is supplied 
as ECM data. It should be appreciated that the scram- 

40 ble key Ksl to be supplied to the scramble block 88 has 
not been enciphered with a work key Kw. 
[0086] In the foregoing example, scramble keys Ksl 
accumulated in the first ECM packet ECM are enci- 
phered as described above but the encryption opera- 

45 tions for other scramble keys Ks2 through Ksl 9 are 
performed identically. Therefore, enciphered ECM pack- 
ets ECM1 ' through ECM 19' are provided by the encryp- 
tion block 82 to the FIFO buffer 861 and unenciphered 
scramble keys Ksl through Ksl 9 are also provided by 

50 the encryption block 82 to the scramble block 88. 

[0087] The multiplexing circuit 87 supplies to the 
scramble block 88 some packets selected from PAT 
packets, PMT packets, and CAT packets buffered in the 
FIFO 841 through 843, transport stream packets con- 

55 talning a plurality of programs Program 1 through Pro- 
gram 9 buffered in the FIFO 851 through 859, and ECM 
packets, EMM packets, and EPG packets buffered in 
the FIFO 861 through 863, depending on the amount of 
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data in each FIFO. In this regard, the FIFO controller 83 
monitors the input rate for packet data supplied to each 
FIFO and it notifies the multiplexer controller 81 of an 
excess input rate condition when the sum of all input 
rates for each FIFO exceeds a predetermined output 
rate. Thus, the multiplexer controller 81 excludes the 
FIFO 862 for buffering EMM packets from the target 
FIFOs to be selected by the multiplexing circuit 87 and 
then switches the other FIFOs as a selection target to 
supply to the scramble block 88 packet data from a 
switched FIFO. Therefore, as the number of FIFOs to be 
selected by the multiplexing circuit 87 decreases, the 
number of select operations for a target FIFO increases 
and thereby the data output rate of each FIFO can be 
increased correspondingly to the excess input rate con- 
dition. 

[0088] When the sum of all input rates for each 
FIFO is under a predetermined output rate, the multi- 
plexer controller 81 supplies to the scramble block 88 
EMM packets buffered in the FIFO 862 by restoring the 
FIFO 862 as a target FIFO to be selected by the multi- 
plexing circuit 87. It should be appreciated that EMM 
data indicating the subscription information buffered in 
the FIFO 862 may not be changed frequently and sub- 
stantially no disadvantageous situations will occur even 
if that FIFO is temporarily excluded from the target 
FIFOs to be selected by the multiplexing circuit 87. 
[0089] When the sum of all input rates for each 
FIFO further increases to such an extent that only the 
exclusion of the single FIFO 862 from the target FIFOs 
to be selected by the multiplexing circuit 87 cannot deal 
with such an excess input rate condition, the multiplexer 
controller 81 excludes not only the FIFO 862 for buffer- 
ing EMM data but the FIFO 863 for buffering EPG data. 
Such an additional exclusion can further decrease the 
number of FIFOs to be selected by the multiplexing cir- 
cuit 87 and further increase the number of select opera- 
tions for a target FIFO and thereby the data output rate 
of each FIFO can be further increased correspondingly 
to the excess input rate condition. It should be appreci- 
ated that EPG data indicating the program guide infor- 
mation buffered in the FIFO 863 may not be changed 
frequently and substantially no disadvantageous situa- 
tions will occur even if that FIFO is temporarily excluded 
from the target FIFOs to be selected by the multiplexing 
circuit 87. 

[0090] The scramble block 88 has a PID detection 
circuit 881 and a scramble circuit 882. The PID detec- 
tion circuit 881 receives transport stream packets from 
the multiplexing circuit 87 as well as a PID table (Figure 
4) from the encoder/multiplexer control unit 9 through 
the multiplexer controller 81 . Since the PID table shows 
the correspondence between PID values and scramble 
keys used in generating transport stream packets, the 
PID detection circuit 881 detects a desired scramble key 
Ks by referencing the PID values stored in the PID table 
and then supplies the detected scramble key Ks to the 
scramble circuit 882. The scramble circuit 882 uses the 



scramble key Ks supplied by the PID detection circuit 
881 to scramble the transport stream packets contain- 
ing program data associated with this scramble key Ks 
and provides an output to the modulation circuit 10 (Fig- 
5 ure 1). 

[0091] Now, the program specific information is 
described below. 

[0092] Program specific information (PSI: 
Program_Specif ic_lnformation) is information indicating 

10 which data is contained in which packet among the 
transport stream packets obtained by multiplexing a plu- 
rality of programs and data. Therefore, a decoder can 
decode desired data by referencing this program spe- 
cific information. 

15 [0093] The program specific information can be 
classified into 4 table structures as shown in Figure 1 1 . 
A program association table (PAT: 
Program_Association_Table) is a table for indicating 
specified program numbers and their corresponding 

20 program map table (PMT) PIDs. A program map table 
(PMT: Program_Map_Table) is a table for indicating 
PIDs of packets in which elements of a specified pro- 
gram are described. A network information table (NIT: 
Network_lnformation_Table) is a private table for indi- 

25 eating information which is to be used in transmitting 
network parameters but is not specifically required by 
any standard. A conditional access table (CAT: 
Conditional_Access_Table) is a table for assigning 
unique PIDs to EMM packets. In the following descrip- 

30 tion, the program association table, the program map 
table, and the conditional access table are described in 
detail. 

[0094] First, the program association table is 
described below with reference to Figures 12 and 13. 

35 [0095] The program association table PAT is a table 
used to specify each transmitted program and the PID 
of a transport stream packet which specifies the content 
of the program. Specifically, the program association 
table PAT consists of the following: tablejd, 

40 section_syntax_indicator, sectionjength, 
transport_stream_id, version_number, 
current_nextJndicator, section_number, 
last_section_number, program_number, network_PID, 
and program_map_PID. 

45 [0096] The tablejd shows a unique identification 
number assigned to each table as shown in Figure 14. 
The tablejd of the program association table PAT is 
"0x00", the tablejd of the conditional access table CAT 
is "0x01", and the tablejd of the program map table 

50 PMT is "0x02". 

[0097] The section_syrrtaxJndicator is a constant 
fixed to "1". 

[0098] The sectionjength is a field for indicating in 
bytes the length from the bit following this 
55 sectionjength to the last byte of the CRC section. 
[0099] The transport_streamJd is identification 
data for discriminating between this transport stream 
and other transport streams multiplexed in the network. 



11 



21 



EP 1 022 900 A1 



22 



[0100] The version_number is data for indicating 
the version number of the program association table 
(PAT). The version number is an integer in the range 0 
through 31 and incremented by 1 when any setting in 
the program association table is changed, that is, any 
characteristic of a transport stream changes. The 
decoder at the receiver end references the 
version_number to determine that only the section of 
the latest version is valid. 

[0101] The current_next_indicator is data for indi- 
cating whether the transmitted program association 
table is currently available. 

[0102] The section_number is data for indicating 
the program association table section number. For 
example, the section_number of the 
program_association_sectionO contained in the pro- 
gram association table is set to "0x00" to show that it is 
the first section. 

[0103] The last_section_number is data for indicat- 
ing the section number of the last section among all the 
sections specified in the program association table. 
Therefore, the last_section_number allows the system 
to know the number of sections specified in the program 
association table. 

[0104] The program_number is a unique number 
given to each of a plurality of programs to be multi- 
plexed. For example, in a data transmission device 
according to the present invention, the program num- 
bers 1 through 9 are assigned to 9 programs to be mul- 
tiplexed, respectively The program_number is data 
which can be defined by the user arbitrarily. However, 
when the program_n umber is set to 0. the 
program_number indicates that a network information 
table (NIT) exists in the stream. 
[0105] The network_PID is data for indicating the 
RID in which a network information table (NIT) in the 
stream is described. The network information table 
(NIT) is a table which can be set by the user arbitrarily 
and is not used for the present device. 
[0106] The program_map_PID is data for indicating 
the P ID of a transport stream packet having a program 
map table applied to the program specified by the 
program_number. For example, if a program consists of 
a piece of video data and 4 pieces of audio data, a RID 
which specifies a transport stream packet having the 
video data of that program and 4 PIDs which specify 
transport stream packets having the audio data of that 
program are described in the program association table. 
[0107] Next, the program map table (PMT) is 
described below with reference to Figures 15 and 16. 
[0108] The program map table is a table used to 
show the mapping between program numbers and data 
elements constituting those programs. That is, the pro- 
gram map table is a section to specify, for each program 
number, PIDs of transport stream packets to transmit 
elements such as video data, audio data, and other 
additional data constituting that program. Specifically, 
the program map table consists of the following: 



tablejd, section_syntax_indicator, sectionjength, 
program_number, version_number, 
current_next_indicator, section_number, 
last_section_number, PCR_PID, programjnfojength, 

5 descriptorO, stream_type, elementary_PID, 
ESJnIbJength, and descriptorQ. 
[0109] The tablejd shows a unique identification 
number assigned to identify each table. The tablejd of 
the program map table is "0x02". 

10 [0110] The section_syntaxJndicator is a constant 
fixed to "1". 

[01 1 1 ] The sectionjength is a field for indicating in 
bytes the length from the bit following this 
sectionjength to the last byte of the CRC section. 

15 [0112] The program_number is a unique number 
given to each of a plurality of programs to be multi- 
plexed. For example, in a data transmission device 
according to the present invention, the program num- 
bers 1 through 9 are assigned to 9 programs to be mul- 

20 tiplexed, respectively 

[0113] The version_number is data for indicating 
the version number of a program map section which 
constitutes the program map table. The version number 
is incremented when data transmitted in the program 

25 map section is changed. 

[0114] The current_nextJndicator is data for indi- 
cating whether the transmitted program association 
table is currently available. If the program association 
table is currently available, the current_nextJndicator is 

30 set to "1"; if the program association table is not cur- 
rently available, the current_nextJndicator is set to "0". 
[0115] The section_number is data for indicating 
the number of a section contained in the program map 
table and it is always set to "0x00" because only one 

35 program map section exists to constitute the program 
map table. 

[0116] The last_section_number is data for indicat- 
ing the section number of the last section among all the 
sections specified in the program map table. Therefore, 
40 the last_section_number is always set to "0x00" in the 
program map section which constitutes the program 
map table. 

[0117] The PCR_PID is data for indicating the PID 
of a transport packet containing PGR data which is valid 

45 for a program specified by the program_number. 

[01 1 8] The programjnfojength is data for specify- 
ing the number of bytes for the descriptorQ described 
following the programjnfojength field. 
[0119] The descriptorQ is a data structure used to 

50 expand the definitions of programs and program ele- 
ments. Various descriptors may be possible, for exam- 
ple, video_stream_descriptor() to describe basic 
information which identifies encoding parameters for 
video elementary streams; audio_stream_descriptor() 

55 to describe basic information which identifies an encod- 
ing version for audio elementary streams; 
hierarchy_descriptor() to describe information which 
identifies program elements containing hierarchically- 
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encoded video and audio data multiplexed into a plural- 
ity of streams; resistration_descriptor() to describe infor- 
mation which identifies private data uniquely and 
definitely; data_stream_alignment_descriptorO to 
describe the alignment type which exists between ele- 
mentary streams associated with each other; 
target_bacl^round_descriptor to describe information 
which specifies a background window to be displayed in 
the background of the display window for transmitted 
video data; video_window_descriptor to describe infor- 
mation which specifies the display position of the dis- 
play window for transmitted video data; CAjdescriptorQ 
to describe a subscription information EMM, a program 
decryption information ECM, and other data; 
languagejdescriptorQ to describe information which 
identifies a language and the language used by associ- 
ated program elements; system_clock_descriptorO to 
transmit information for the system clock used for gen- 
eration of time stamps; 
multiplex_buffer_utilization_descriptorO to describe 
data which indicates the critical levels of underflow and 
overflow of data occupancy in the STD 
(system_target_decoder) multiplex buffer containing the 
video_buffer_verifier; copyright_descriptorO to describe 
information which allows identification of audio/visual 
works to protect the copyrights thereof; 
maximum_bitrate_descriptorO to describe information 
which specifies the maximum bit rate for transmitted 
data elements; private_dataJndicator_descriptorO to 
specify transmission of private data; 
smoothing_buffer_descriptor() to describe information 
for the size of a smoothing buffer and the leak rate of 
output from that buffer; STD_descriptor() to specify the 
leak value of an STD buffer; and ibpjdescriptorQ to 
describe information for encoding types. 
[0120] It should be appreciated that in a data trans- 
mission device according to the present invention, a 
data structure of descriptorQ used in the program map 
table is intended to describe information which specifies 
the PI D of a transport stream packet containing a pro- 
gram decryption information ECM. 
[0121] The streamjype is data for specifying the 
type of a program element contained in a packet with 
the PID specified by the elementary_PID described 
below. For example, the stream_type is set to "0x01 " if a 
program element contained in the packet is video data 
conformable to the ISO/IEC11172 standard, it is set to 
"0x02" if a program element is video data conformable 
to the ISO/IEC13818-2 standard, it is set to "0x03" if a 
program element is audio data conformable to the 
ISO/IEC1 1172 standard, and it is set to "0x04" if a pro- 
gram element is audio data conformable to the 
ISO/IEC13818-3 standard. In the program map section, 
the stream_type is repeated as many times as the 
number of elements constituting a program specified by 
the program_number. 

[0122] The elementary_PID is a field for specifying 
the PID of a transport stream packet which transmits 



elements constituting a program specified by the 
program_number. The elementary_PID is data 
described correspondingly to the streamjype which 
indicates the type of a stream element. 
5 [0123] The ESJnfoJength is data for specifying the 
number of bytes of a descriptor described following the 
ESJnfoJength field. 

[0124] Next, the conditional access table (CAT) is 
described below in detail with reference to Figures 17 

10 and 18. The conditional access table is a section for 
specifying the PID of a packet which transmits subscrip- 
tion information EMMs used to descramble video data 
and audio data in a pay broadcast system. The condi- 
tional access table is also a section for specifying the 

15 relationship between a conditional access system (OA 
system: Conditional Access System) which allows only 
subscribers to descramble programs and a subscription 
information EMM. 

[0125] The PID of the conditional access table is 
20 not specified by the program association table like the 
program map table and therefore, each field of the con- 
ditional access table can be decoded by finding the 
unique PID value "0x01" assigned to the conditional 
access table from bit streams. 
25 [0126] Specifically, the conditional access table 
consists of the following: tablejd, 
section_syntaxJndicator, sectionjength, 
version_number, current_nextJndicator, 
section_number, last_section_number, and descrip- 
30 torQ. 

[0127] The tablejd shows a unique identification 
number assigned to each table and the tablejd 
assigned to the conditional access table CAT is "0x01 ". 
[0128] The section_syntaxJndicator is a constant 

35 fixed to "1 ". The sectionjength is a field for indicating in 
bytes the length from the bit following this 
sectionjength to the last byte of the CRC section. The 
version_number is data for indicating the version 
number of the conditional access table (CAT). The 

40 version_number is incremented by 1 when any setting 
of the conditional access table is changed. The 
current_nextJndicator is data for indicating whether the 
transmitted conditional access table is currently availa- 
ble. If the conditional access table is currently available, 

45 the current_next Jndicator is set to "1 "; if the conditional 
access table is not currently available, the 
current_nextJndicator is set to "0". 
[0129] The section_number is data for indicating 
the section number of the conditional access table. For 

50 example, the CA_sectionO field contained in the condi- 
tional access table is set to "0x00" to indicate that it is 
the first section. The section_number is incremented by 
1 each time the sections contained in the conditional 
access table increase. 

55 [0130] The last_section_number is data for indicat- 
ing the section number of the last section among all the 
sections specified in the conditional access table. 
[0131] As described above, the descriptorQ is a 
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data structure used to expand the definitions of pro- 
grams and program elements. It should be appreciated 
that in a data transmission device according to the 
present invention, a data structure of descriptorQ used 
in the conditional access table is intended to describe 
information which specifies the PID of a transport 
stream packet containing a subscription information 
EMM. 

[0132] Next, the conditional access descriptor 
CA_descriptorO used in the program map table and the 
conditional access table is described below with refer- 
ence to Figure 19. 

[0133] The conditional access descriptor is used to 
specify a subscription information EMM containing per- 
sonal information on subscription and a work key Kw to 
decipher enciphered ECM data as well as a program 
decryption information ECM containing a scramble key 
Ks to descramble elementary streams such as video 
and audio. Therefore, if elementary streams such as 
video and audio are scrambled, the conditional access 
descriptor always exists in the bit streams. 
[0134] The conditional access descriptor 
CA_descriptor() consists of the following data: 
descriptor_tag, descriptorjength, CA_system_ID, 
CA_PID, and private_data_byte. Thedescriptorjag is a 
unique identification tag for identifying each of a plurality 
of descriptors as described above. The conditional 
access descriptor CA_descriptorO has a descriptorjag 
of "9" assigned thereto. The descriptorjength is data 
for specifying the number of data bytes of a descriptor 
immediately following the descriptorjength. The 
CA_system_ID is data for indicating the type of a condi- 
tional access system (CA system) which generates and 
applies associated ECM or EMM data. The CA_PID 
indicates the PID of a transport stream containing ECM 
or EMM data on a conditional access system (CA sys- 
tem) specified by the CA_system_ID. 
[0135] The data contents described in a packet 
specified by the CA_PID of the conditional access 
desaiptor CA_descriptorO may vary from context to 
context of the CA_descriptor(). With reference to Figure 
20, a packet specified by the CA_PID is described 
below. 

[0136] It should be appreciated first that the data 
contents described in a packet specified by the CA_PID 
may vary with the usage of the CA_descriptor(), that is, 
whether the CA_descriptorO is used in the conditional 
access table CAT or in the program map table. Specifi- 
cally, if the CA_descriptorO exists in the conditional 
access table, the CA_PID indicates a transport stream 
packet containing EMM data. If the GA_descriptorO 
exists in the program map table, the CA_PID indicates a 
transport stream packet containing ECM data. 
[0137] In addition, the data contents described in a 
packet specified by the CA_PID may also vary with the 
context in the program map table of the conditional 
access descriptor CA_descriptorsO. In this regard, the 
context in the program map table of the conditional 



access descriptor CA_descriptorO means whether the 
CA_descriptorO is used in the first FOR statement (Fig- 
ure 15) or in the second FOR statement (Figure 15). 
[0138] If the conditional access descriptor 

5 GA_descriptorO is used in the first FOR statement, the 
CA_PID indicates the PID of a transport stream packet 
containing ECM data. The first CA_descriptorO for this 
case is used according to the syntax for describing the 
correspondence between a transport stream packet 

10 containing a program specified by the program_number 
and a transport stream packet containing ECM data. 
That is, the same ECM data has been assigned to all 
data elements contained in the program specified by the 
program_number. In other words, all data elements in 

15 the program have been scrambled and descrambled 
with the same scramble key. 

[0139] On the contrary if the conditional access 
descriptor CA_descriptorO is used in the second FOR 
statement as the second CA_descriptorO, the CA_PID 

20 also indicates the PID of a transport stream packet con- 
taining ECM data. However, the second 
CA_descriptorO is not intended to describe the corre- 
spondence between a transport stream packet contain- 
ing a program specified by the program_number and a 

25 transport stream packet containing ECM data but this 
CA_descriptorO describes the correspondence 
between a transport stream packet containing data ele- 
ments specified by the elementary_PID and a transport 
stream packet containing ECM data. That is, different 

30 ECM data has been assigned to each data element 
specified by the elementary_PID. In other words, differ- 
ent data elements in the program have been scrambled 
and descrambled with different scramble keys. When it 
is assumed that a program consists of a channel of 

35 video data and two channels, that is, main audio and 
subaudio, of audio data, using different scramble keys 
for each data element in such a manner may allow the 
system to scramble the subaudio data with a different 
scramble key from those for other channels. 

40 [0140] Next, EMM data and ECM data are 
described below. 

[0141] EMM (Entitlement Management Message) 
data is data which contains subscription information 
indicating programs subscribed for by a subscriber and 

45 a work key Kw used to encipher a scramble key Ks. 
EMM data is transmitted in the payload of a transport 
stream packet like the program association table PAT, 
the program map table PMT, and the conditional access 
table CAT. In the following description, a transport 

50 Stream packet containing EMM data will be referred to 
as an EMM packet. 

[0142] As shown in Figure 21 , an EMM packet con- 
sists of a header of 4 bytes and a payload section of 1 83 
bytes. Like a transport stream packet as described 
55 above, the header of an EMM packet consists of the fol- 
lowing data fields: sync_byte, transport_errorJndicator, 
payload_unit_startJndicator, transport jDriority, PID, 
transport_scrambling_control, 
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adaptation_field_control, and continuity_counter. The 
payload section of 183 bytes consists of an EMM sec- 
tion header, EMM data, CRC, and stuffing bytes. 
[0143] The EMM section header consists of the fol- 
lowing data fields: tablejd, section_syntax_indicator, 
reserved_0, reserved_1, sectionjength, 

table_id_extention, reservGd_2, version_number, 
current_next_indicator, section_n umber, and 
last_section_number. The tablejd is a unique identifi- 
cation number assigned to each table (each section). 
The EMM section has user-definable tablejd "0x40" 
through "OxFE" assigned as identification numbers. The 
section_syntaxJndicator is a constant fixed to "1 ". The 
sectionjength is a data field for indicating in bytes the 
length from the bit following this sectionjength to the 
last byte of the CRC section. The tableJd_extention is 
data for indicating whether there is any extension data 
of the EMM section. The version_number is data for 
indicating the version number of the EMM section. The 
version number is incremented when any parameter of 
the EMM section changes in a transport stream. The 
current_nextJndicator is data for indicating whether the 
transmitted EMM section is currently available. The 
section_number is data for indicating the number of the 
EMM section and it is always "1". The 
last_section_number is data for indicating the section 
number of the last section in the EMM section and it is 
always "1". 

[0144] The EMM data consists of the following data 
fields: cardJD, EMMJype, CA_system_ID, Kw_No, 
Kw, authorizejype, serviceJD, series_ID, eventJD, 
and component_map. 

[0145] The card J D is an identification number 
given to a unique IC card mounted on the IRD and it is 
also used as an identification number for management 
of its subscriber. The EMMJype is data for indicating 
the type of EMM data. The CA_system_ID is an identifi- 
cation number given to a OA system containing a sub- 
scriber management system. The Kw indicates a work 
key used to encipher a scramble key Ks and the Kw_No 
is a number for indicating which work key among 256 
predefined work keys Kw was used to encipher the 
scramble key Ks. The authorizejype, the service_ID, 
the series_ID, and the event_ID are subscription condi- 
tions for indicating which program is subscribed for by a 
subscriber. The component_map is data for indicating 
which element of the subscribed program is subscribed 
for. 

[0146] ECM (Entitlement_Control_Message) data 
is data which contains scramble keys Ks used to 
descramble the scrambled programs subscribed for by 
a subscriber. ECM data is transmitted in the payload of 
a transport stream packet like the program association 
table PAT, the program map table PMT, and the condi- 
tional access table GAT In the following description, a 
transport stream packet containing ECM data will be 
referred to as an ECM packet. ECM packets will be 
transmitted at intervals of approximately 100 msec and 



scramble keys transmitted as EMM data will be updated 
at intervals of approximately 4 sec. 
[0147] As shown in Figure 22, an ECM packet con- 
sists of a header of 4 bytes and a payload section of 1 83 

5 bytes. Like a transport stream packet as described 
above, the header of an ECM packet consists of the fol- 
lowing data fields: sync_byte, transport_GrrorJndicator, 
payload_unit_startJndicator, transport_priority, RID, 
transport_scrambling_control, 

10 adaptationJield_control, and continuity_counter. The 
payload section of 183 bytes consists of an ECM sec- 
tion header, ECM data, CRC, and stuffing bytes. 
[0148] The ECM section header consists of the fol- 
lowing data fields: tablejd, section_syntaxJndicator, 

15 reserved_0, reserved_1, sectionjength, 

tableJd_extention, reserved_2, version_number, 
current_nextJndicator, section_number, and 
last_section_number. The tablejd is a unique identifi- 
cation number assigned to each table (each section). 

20 The ECM section has user-definable tablejd "0x40" 
through "OxFE" assigned as identification numbers. The 
section_syntaxJndicator is a constant fixed to "1". The 
sectionjength is a data field for indicating in bytes the 
length from the bit following this sectionjength to the 

25 last byte of the CRC section. The tableJd_extention is 
data for indicating whether there is any extension data 
of the ECM section. The version_number is data for 
indicating the version number of the ECM section. The 
version number is incremented when any parameter of 

30 the ECM section changes in a transport stream. The 
current_nextJndicator is data for indicating whether the 
transmitted ECM section is currently available. The 
section_number is data for indicating the number of the 
ECM section and it is always "1". The 

35 last_section_number is data for indicating the section 
number of the last section in the ECM section and it is 
always "1 ". 

[0149] The ECM data consists of the following data 
fields: ECMJype, CA_systemJD, Kw_No, 

40 service_mode, service_ID, series_ID, event_ID, 
component_map, Ks_Odd, and Ks_Even. 
[01 50] The ECMJype is data for indicating the type 
of ECM data. The CA_system_ID is an identification 
number given to a CA system containing a subscriber 

45 management system. The Kw_No is a number for indi- 
cating which work key among 256 predefined work keys 
Kw was used to encipher a scramble key Ks. The 
service_mode, the service_ID, the series_ID, and the 
event_ID are subscription conditions for indicating 

50 which program is subscribed for by a subscriber. The 
component_map is data for indicating which element of 
the subscribed program is subscribed for. The Ks_Odd 
and the Ks_Even are scramble keys used to scramble 
transmitted video and audio data. The scramble keys 

55 consist of the odd keys Ks_Odd and the even keys 
Ks_Even and the odd keys and the even keys are alter- 
nately used as scramble keys at intervals of 4 sec. 
[0151] Next, the IRD 
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(lntegrated_Receiver_Decoder) 20 provided as a 
receiver is described below in detail with reference to 
Figure 23. 

[0152] The IRD comprises a demodulation circuit 
21 for demodulating modulated streams transmitted via 
a satellite, a demultiplexer 22 for dividing the streams 
demodulated by the demodulation circuit 21 into packet 
types, a CPU 23 for receiving PAT packets, PMT pack- 
ets, CAT packets, EMM packets, and ECM packets 
divided by the demultiplexer 22, a security module 24 for 
deciphering enciphered work keys Kw' and enciphered 
scramble keys Ks', descramblers 25V, 25A, and 25P for 
descrambling scrambled video streams, audio streams, 
and private data streams, and decoders 26V and 26A 
for decoding video streams and audio streams. 
[0153] The demultiplexer 22 functions to receive a 
control command from the CPU 23 and supply an 
appropriate transport stream packet to the CPU 23 with 
a proper timing in response to that command. 
[0154] The CPU 23 comprises a PAT packet ana- 
lyzer 231 for analyzing PAT packets supplied by the 
demultiplexer 22, a PMT packet analyzer 232 for ana- 
lyzing PMT packets supplied by the demultiplexer 22, a 
CAT packet analyzer 233 for analyzing CAT packets 
supplied by the demultiplexer 22, an EMM packet ana- 
lyzer 234 for analyzing EMM' packets supplied by the 
demultiplexer 22, and an ECM packet analyzer 235 for 
analyzing ECM' packets supplied by the demultiplexer 
22. 

[0155] The PAT analyzer 231 analyzes a transport 

stream packet supplied by the demultiplexer 22 as a 
PAT packet to obtain the program_number and the 
program_map_PID contained in the PAT packet. The 
PAT analyzer 231 also receives from the security mod- 
ule 24 the authorize_type indicating which program is 
subscribed for by a subscriber. Then the PAT analyzer 
231 compares the author ize_type supplied by the secu- 
rity module with the program_number supplied by the 
demultiplexer 22 and selects only the 
program_map_PID corresponding to the 
program_number which is consistent with the program 
subscribed for by the subscriber. Thus, the PAT analyzer 
231 can obtain only the PID of a program map table cor- 
responding to that program. 

[0156] Then the demultiplexer 22 selects a trans- 
port stream packet with the PID specified by the 
program_map_PID supplied by the PAT analyzer 231 to 
provide the selected transport stream packet to the 
PMT analyzer 232 as a PMT packet. 
[0157] The PMT analyzer 232 analyzes PMT data 
contained in a PMT packet with the PID specified by the 
program_map_PID. Specifically, the PMT analyzer 232 
obtains from the elementary_PID described as PMT 
data in the PMT packet the PID of a transport stream 
packet containing data elements which constitute a pro- 
gram specified by the program_n umber. For example, 
assuming that a program consists of two data elements, 
that is, video data and audio data, the first 



elementary_PID will specify a transport stream packet 
containing a video stream and the second 
elementary_PID will specify another transport stream 
packet containing an audio stream. 

5 [0158] In addition, the PMT analyzer 232 refer- 
ences the CA_descriptor described in PMT data as a 
descriptorO function. Then the PMT analyzer 232 
obtains the CA_PID described in the CA_descriptor and 
feeds back this CA_PID to the demultiplexer 22. The 

10 CA_PID described in the CA_descriptor is data for indi- 
cating the PID of a transport stream packet containing 
ECM data. 

[0159] Then the demultiplexer 22 provides a trans- 
port stream packet with the PID specified by the 

15 elementary_PID supplied by the PMT analyzer 232 to 
an appropriate processing circuit. For example, if the 
data element is a video stream, it is provided to the 
descrambler 25V for descrambling video streams; if the 
data element is an audio stream, it is provided to the 

20 descrambler 25A for descrambling audio streams; if the 
data element is a private data stream, it is provided to 
the descrambler 25P for descrambling private data 
streams. 

[0160] In addition, the demultiplexer 22 supplies a 

25 transport stream packet with the PID specified by the 
CA_PID to the ECM analyzer 235 as an ECM packet. 
Thus, the ECM data supplied to the ECM analyzer 235 
contains only ECM data concerning a program sub- 
scribed for by a subscriber. 

30 [0161] The ECM analyzer 235 first filters an ECM' 
packet received from the demultiplexer 22. Specifically 
the ECM analyzer 235 compares the CA_system_ID in 
the ECM data with the CA_System_ID supplied by the 
security module 24 and selects only an ECM packet 

35 containing the CA_system_ID which matches the 
CA_systemJD supplied by the security module 24. 
Then the ECM analyzer 235 can obtain enciphered 
scramble keys Ks' by analyzing ECM data contained in 
the selected ECM packet. The ECM analyzer 235 sup- 

40 plies the enciphered scramble keys Ks' to a decryption 
circuit 242 in a microprocessor MPU of the security 
module 24. 

[0162] The demultiplexer 22 detects a transport 
stream packet with the PID of a CAT packet from a 
45 transmitted bit stream and provides the detected trans- 
port stream packet to the CAT analyzer 233 as a CAT 
packet. 

[0163] The CAT analyzer 233 detects a 
CA_descriptorO function contained in the CAT packet 
50 received from the demultiplexer 22 and obtains the PID 

of a transport stream packet specified by the 
CA_descriptorO of the CAT packet from the CA_PID in 
the CA_descriptorO function. The transport stream 
packet specified by the CA_descriptorO of the CAT 
55 packet is a transport stream packet containing EMM 
information. 

[0164] The demultiplexer 22 selects a transport 
stream packet with the PID specified by the CA_PID 
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received from the CAT analyzer 233 from a transmitted 
bit stream and supplies the selected transport stream 
packet to the EMM analyzer 234 as an EMM' packet. 
[0165] The EMM analyzer 234 first filters an EMM' 
packet received from the demultiplexer 22 and selects 
only an EMM' packet corresponding to the security 
module. Specifically, EMM data contained in an EMM' 
packet can be obtained by referencing the CA_PID, 
because a transport stream packet specified by the 
CA_PID of the CA_descriptor() for the EMM packet 
received from the demultiplexer 22 is an EMM' packet 
containing EMM data. The EMM analyzer 234 com- 
pares the CardJD and the CA_system_ID in the EMM 
data with the CardJD and the CA_system_ID supplied 
by a memory 241 of the security module 24 and selects 
only an EMM' packet containing the Card_ID and the 
CA_syslem_ID which match the Card_ID and the 
CA_system_ID supplied by the security module 24, 
respectively 

[0166] Then the EMM analyzer 234 supplies EMM 
data of 101 bytes contained in the selected EMM packet 
to the memory 241 of the security module 24 as the lat- 
est EMM data to replace old EMM data in the memory 
241. In addition, the EMM analyzer 234 supplies an 
enciphered work key Kw' contained in the EMM data to 
the decryption circuit 242 in the microprocessor MPU of 
the security module 24. 

[0167] The security module 24 consists of the 
memory 241 and the microprocessor comprising the 
first decryption circuit 242 and the second decryption 
circuit 243. The security module 24 is composed of, for 
example, an IC card which is removable from the IRD. 
[01 68] The first decryption circuit 242 of the security 
module 24 receives an enciphered work key Kw' from 
the EMM analyzer 234 to decipher the enciphered work 
key Kw' with a prestored master key Km. Then the first 
decryption circuit 242 supplies the deciphered work key 
Kw to the second decryption circuit 243. 
[0169] The second decryption circuit 243 of the 
security module 24 receives an enciphered scramble 
key Ks' from the ECM circuit 235 as well as the deci- 
phered work key Kw from the first decryption circuit 242 
to decipher the enciphered scramble key Ks' with the 
deciphered work key Kw. The deciphered scramble key 
Ks is supplied to the descramblers 25V, 25A, and 25P. It 
should be appreciated that in the foregoing, the same 
scramble key Ks is supplied to the descramblers 25V. 
25A, and 25P but different scramble keys Ks may be 
supplied to different descramblers if a different scramble 
key Ks is defined for each data element. 
[0170] From the foregoing, in a data multiplexing 
device of such a configuration that transport stream 
packets of program data which consists of a plurality of 
data elements are multiplexed and transmitted, a 
scramble key corresponding to one or more data ele- 
ments among a plurality of data elements constituting a 
program is generated and then each data element is 
scrambled, thereby each data element can be sub- 



scribed for by a subscriber. 

[0171] Since each of multiplexed transport stream 
packets is scrambled with its corresponding scramble 
key, the circuit configuration for scrambling can be made 
5 Simpler than that for scrambling each transport stream 
packet before multiplexing. 

[0172] Any overflow from a puffer memory for buff- 
ering higher priority data elements can be avoided by 
switchably controlling a switch means to exclude a 

10 buffer memory for buffering lower priority information 
among a plurality of buffer memories, when the input 
rate for a data element supplied to each buffer memory 
is higher than a reference rate. 
[0173] At the receiver end, different data elements 

15 can be descrambled separately by descrambling with a 
scramble key the transport stream packets of each data 
element corresponding to that scramble key. 
[0174] According to the above-mentioned configu- 
ration, a data multiplexing device which allows a sub- 

20 scriber to watch and/or hear desired data elements only 
can be achieved by a simpler implementation. 
[01 75] Moreover, any overflow from a buffer mem- 
ory can be avoided effectively by excluding lower priority 
data elements from the selections and multiplexing 

25 desired data elements in preference to others. 

Industrial Applicability 

[0176] The present invention is applicable to a dig- 
so ital broadcast system which performs compression-cod- 
ing of video data and audio data according to the 
MPEG2 and transmits the coded streams over a ground 
wave or a satellite wave. 

35 DESCRIPTION OF SYMBOLS 

[0177] 1 ... Broadcast Data Processing System, 2 ... 
Subscriber Management System, 3 ... Subscriber 
Authorization System, 4 ... EPG system, 5 ... Server 

40 System, 6 ... Routing System, 7 ... Encoding System, 8 
... Multiplexer System, 9 ... Encoder/Multiplexer Control 
Unit, 10 ... Modulation Circuit, 20 ... IRD, 21 ... Demod- 
ulation Circuit, 22 ... Demultiplexer, 24 ... IC Card, 25V, 
25A, 25P ... Descrambler, 26V ... MPEG Video 

45 Decoder, 26A ... MPEG Audio Decoder, 70 ... Encoding 
Controller, 241 ... Memory, 242 ... First Decryption Cir- 
cuit, 243 ... Second Decryption Circuit, 711V through 
719V ... MPEG Video Encoder, 71 1A through 719A ... 
MPEG Audio Encoder, 721 through 729 ... Multiplexing 

50 Circuit, 841 through 863 ... Buffer Memory (FIFO). 

Claims 

1. A data multiplexing device which multiplexes and 
55 transmits transport stream packets of program data 
consisting of a plurality of data elements con- 
structed in the form of transport stream packets, 
said device comprising: 
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a scramble key generation means for generat- 
ing a scramble key corresponding to each of 
said data elements, and 
a scramble means for scrambling said corre- 
sponding transport stream packet of data ele- 5 
ment by using a scramble key generated by 
said scramble key generation means. 

2. A data multiplexing device according to claim 1, 
wherein said scramble key generation means gen- io 
erates a scramble key corresponding to one or 
more data elements among said plurality of data 
elements constituting said program. 

3. A data multiplexing device according to claim 1, is 
wherein said plurality of data elements constituting 
said program are video data, main audio data, sub- 
audio data, and private data. 

4. A data multiplexing device according to claim 1, 20 
wherein said scramble means scrambles each of 
said multiplexed transport stream packets by using 
said scramble key corresponding to said transport 
stream packet. 

25 

5. A data multiplexing device according to claim 4, 
wherein said scramble means searches for each 
scramble key for scrambling said transport stream 
packet by using a correspondence table which 
shows packet identification codes for said transport 30 
stream packets and their corresponding scramble 
keys. 



a switch control means which selects, accord- 
ing to an input rate for said packet data strings, 
said plurality of buffer memories switchable by 
said switch means. 

9. A data multiplexing device according to claim 8, 
wherein said switch control means switchably con- 
trols said switch means to exclude a buffer memory 
for buffering lower priority information among said 
plurality of buffer memories, when said input rate is 
higher than a reference rate. 

10. A data multiplexing device according to claim 9, 
wherein said switch control means determines 
packet data containing EMM data to be lower prior- 
ity information and ^eludes a buffer memory for 
buffering said packet data containing said EMM 
data among said switchable buffer memories. 

11. A data multiplexing device according to claim 10, 
wherein said switch control means excludes, in 
addition to said buffer memory for buffering said 
packet data containing said EMM data, a buffer 
memory for buffering packet data containing EPG 
data among said switchable buffer memories, when 
said input rate is still higher than said reference rate 
after said buffer memory for buffering said packet 
data containing said EMM data has been excluded. 

12. A program distribution system for distributing a pro- 
gram consisting of a plurality of data elements, said 
program distribution system comprising: 



6. A data multiplexing device according to claim 4, 
wherein said data multiplexing device comprises a 35 
first encryption means for enciphering said scram- 
ble key with a work key and multiplexes said enci- 
phered scramble key with said transport stream 
packet to transmit it. 

40 

7. A data multiplexing device according to claim 6, 
wherein said data multiplexing device comprises a 
second encryption means for enciphering said work 
key with a master key and multiplexes said enci- 
phered work key with said transport stream packet 45 
to transmit it. 

8. A data multiplexing device comprising : 

a plurality of buffer memories which store a plu- so 
rality of packet data strings constituting a plu- 
rality of data elements, 

a multiplexing means which has a switch 
means for switching said buffer memories and 
which time-division multiplexes said plurality of ss 
packet data strings to provide an output by 
sequentially time-division switching said buffer 
memories with said switch means, and 



a subscriber management system for manag- 
ing subscribers' subscriptions for each program 
or data element, 

a subscriber authorization system for generat- 
ing a scramble key to be used for descrambling 
said data elements contained in said program 
for each of said data elements, and 
a multiplexer system comprising: 

an encoding system for encoding each of 
said data elements contained in said pro- 
gram to generate encoded streams con- 
sisting of encoded data elements for each 
program, 

a multiplexing means for multiplexing said 
encoded streams generated for each pro- 
gram by said encoding system, and 
a scramble means for selectively scram- 
bling each of said encoded data elements 
contained in said multiplexed stream 
based on said scramble key generated by 
said subscriber authorization system. 

13. A program distribution system according to claim 
12, wherein said subscriber management system 
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generates a work key for enciphering said scramble 
key, and 

said subscriber management system supplies 
to said subscriber authorization system a sub- 
scriber identification number for identifying said 
subscriber and said work key as EMM data. 

14. A program distribution system according to claim 

13, wherein said subscriber authorization system 
comprises a first encryption means for enciphering 
said work key supplied as said EMM data with a 
master key to provide an enciphered work key as 
an output. 

15. A program distribution system according to claim 

14, wherein said subscriber authorization system 
supplies to said multiplexer system said enciphered 
work key enciphered by said first encryption means 
and said subscriber identification number as enci- 
phered EMM data. 

16. A program distribution system according to claim 

15, wherein said subscriber authorization system 
supplies to said multiplexer system a work key Iden- 
tification number for identifying said enciphered 
work key enciphered by said first encryption means 
and said scramble key as ECM data. 

17. A program distribution system according to claim 

16, wherein said subscriber authorization system 
comprises a work key table which shows the corre- 
spondence between said work key and a work key 
Identification number for identifying said work key, 
and 

said subscriber authorization system supplies 
said work key table to said multiplexer system. 

18. A program distribution system according to claim 

17, wherein said multiplexer system comprises a 
second encryption means for enciphering said 
scramble key contained in said ECM data with said 
work key to provide an enciphered scramble key as 
an output. 

19. A program distribution system according to claim 

18, wherein said work key used by said second 
encryption means for enciphering said scramble 
key Is not said enciphered work key contained In 
said EMM data but an unenciphered work key 
obtained from said work key table supplied by said 
subscriber authorization system. 

20. A program distribution system according to claim 

19, wherein said second encryption means obtains 
a work key from said work key identification number 
contained in said ECM data by referencing said 



work key table supplied by said subscriber authori- 
zation system, 

said second encryption means enciphers said 
5 scramble key contained in said ECM data by 

using said work key obtained from said work 
key table, and 

said second encryption means provides said 
enciphered scramble key enciphered by said 
10 second encryption means as enciphered ECM 

data. 

21. A program distribution system according to claim 

20, wherein said encoded stream provided by said 
15 encoding system and said enciphered EMM data 

and ECM data provided by said subscriber authori- 
zation system are provided in the form of transport 
stream packets and each of said transport stream 
packets is given a packet ID for identifying said 
20 transport stream packet. 

22. A program distribution system according to claim 

21, wherein said multiplexer system further com- 
prises a second encryption means for enciphering 

25 said scramble key contained In said ECM data to 
provide enciphered ECM data as an output to said 
multiplexing means. 

23. A program distribution system according to claim 
30 22, wherein said scramble means does not scram- 
ble said enciphered EMM data and said enciphered 
ECM data but scrambles only said plurality of data 
elements constituting said program. 

35 24. A program distribution system according to claim 

22, wherein said scramble means scrambles said 
data elements by using scramble keys associated 
with said data elements based on a table which 
shows the correspondence between the packet ID 

40 of a transport stream packet contal ni ng each of said 
data elements and a scramble key defined for said 
data element. 

25. A program distribution system according Id claim 
45 22, wherein said scramble means detects the 
packet IDs of all transport stream packets supplied 
by said multiplexing means to said scramble 
means, 

50 said scramble means determines whether 

scramble keys are defined for said detected 
packet IDs based on a table which shows the 
correspondence between said packet IDs and 
said scramble keys, 

55 if some scramble keys are defined for said 

packet IDs, said scramble means scrambles 
data elements contained in transport stream 
packets Indicated by said packet IDS with said 
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defined scramble keys, and 
if no scramble keys are defined for said packet 
IDs, said scramble means does not scramble 
data contained in transport stream packets 
indicated by said packet IDs. s 

26. A program distribution system according to claim 
20, wherein said multiplexer system further com- 
prises a second encryption means for enciphering 
said scramble key contained in said ECM data and io 
a buffer means for buffering data supplied to said 
multiplexer system in the form of transport stream 
packets and for providing said transport stream 
packets to said multiplexing means. 

15 

27. A program distribution system according to claim 
26, wherein said multiplexer system monitors free 
area of a plurality of buffers for buffering said trans- 
port stream packets containing said data elements, 
and 20 

if any of said plurality of buffers for buffering 
said transport stream packets containing said 
data elements is likely to overflow, said trans- 
port stream packets containing said EMM data 25 
are not provided to said multiplexing means by 
a buffer for buffering said transport stream 
packets containing said EMM data and instead, 
said transport stream packets containing said 
data elements are provided to said multiplexing 30 
means by said buffer likely to overflow. 

28. A program distribution system according to claim 
20, further comprising: 

35 

a distribution system for distributing transport 
streams provided by said multiplexer system to 
the receiving end through a transmission line, 
and 

a reception system for receiving said transport 40 
streams transmitted through said transmission 
line. 

29. A program distribution system according to claim 

28, wherein said reception system comprises: 45 

a demultiplexer for demultiplexing said trans- 
mitted transport streams, 
a descrambler for descrambling said scrambled 
data elements with said supplied scramble so 

keys, respectively 

a decoder for decoding said descrambled data 
for each data element, 

a CPU for analyzing transport stream packets 
constituting said transport stream, and ss 
a security module for deciphering said enci- 
phered scramble key contained in said trans- 
port stream and supplying said deciphered 



scramble key to said descrambler. 

30. A program distribution system according to claim 

29, wherein said security module comprises: 

a memory means for storing a subscriber's 
subscription information contained in said enci- 
phered EMM data contained in said transmitted 
transport stream, 

a first decryption means for receiving said enci- 
phered work l«y contained in said transmitted 
transport stream as well as the same master 
key as that used by said subscriber manage- 
ment system to decipher said enciphered work 
key with said master key, and 
a second decryption means for receiving said 
enciphered scramble key contained in said 
transport stream as well as said deciphered 
work key supplied by said first decryption 
means to decipher said enciphered scramble 
key with said deciphered work key. 

31. A program distribution system according to claim 

30, wherein said CPU filters, from said transport 
stream packets containing said enciphered ECM 
data supplied by said demultiplexer, only a trans- 
port stream packet having enciphered ECM data on 
a program or data element subscribed for by a sub- 
scriber, and 

said CPU obtains said enciphered scramble 
key from said enciphered ECM data by analyz- 
ing said enciphered ECM data contained in 
said filtered transport stream packet. 

32. A program distribution system according to claim 

31, wherein if an enciphered scramble key associ- 
ated with said program is supplied by said CPU, 
said security module deciphers said supplied enci- 
phered scramble key to supply the same scramble 
key to a plurality of descramblers corresponding to 
a plurality of data elements constituting said pro- 
gram, respectively, and 

if a plurality of enciphered scramble keys asso- 
ciated with said plurality of data elements are 
supplied by said CPU. said security module 
deciphers said plurality of supplied enciphered 
scramble keys, respectively, to supply different 
scramble keys to a plurality of descramblers 
corresponding to subscribed data elements 
among said plurality of data elements. 

33. A program distribution system according to claim 
12, wherein said subscriber authorization system 
comprises a first encryption means for enciphering 
with a master key a work key used for enciphering 
said scramble key, 
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said subscriber authorization system supplies 
to said multiplexer system said enciphered 
work key enciphered by said first encryption 
means and a subscriber identification number 
for identifying said subscriber as enciphered 5 
ElVIM data, and 

said subscriber authorization system supplies 
to said multiplexer system a work key identifica- 
tion number for identifying said enciphered 
work key enciphered by said encryption means 10 
and said scramble key as ECM data. 



34- A program distribution system according to claim 
33, comprising an encoder/multiplexer control sys- 
tem which generates a program specific informa- 15 
tion for indicating how to multiplex said plurality of 
programs, said plurality of data elements constitut- 
ing said programs, said plurality of ECM data 
streams, and said plurality of EMM data streams, 
and controls said encoder system and said multi- 20 
plexer system to multiplex said plurality of pro- 
grams, said plurality of data elements, said plurality 
of ECM data streams, and said plurality of EMM 
data streams according to said generated program 
specific information. 25 

35. A program distribution system according to claim 
33, comprising an encoder/multiplexer control sys- 
tem which generates a program specific informa- 
tion for identifying the packet IDs of a transport 30 
stream packet containing said plurality of data ele- 
ments constituting said program, a transport stream 
packet containing said ECM data, and a transport 
stream packet containing said EMM data within a 
transport stream provided by said data distribution 35 
system, and 



36. A program distribution system according to claim 
34, wherein said encoder system supplies to said 
multiplexer system said encoded data elements as 
elementary packets in the form of transport stream 
packets, 
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plies to said multiplexer system said program 
specific information as PSI packets in the form 
of transport stream packets. 

37. A program distribution system according to claim 

36, wherein said multiplexer system further com- 
prises, previous to said multiplexing means, a sec- 
ond encryption means for enciphering a scramble 
key contained in said ECM data. 

38. A program distribution system according to claim 

37, wherein said subscriber authorization system 
supplies to said second encryption means of said 
multiplexer system a work key table which shows 
the correspondence between said work key and a 
work key identification number Ibr identifying said 
work key. 

39. A program distribution system according to claim 

38, wherein said second encryption means obtains 
a work key from said work key identification number 
contained in said ECM data by referencing said 
work key table, 

said second encryption means enciphers said 

scramble key contained in said ECM data by 
using said work key obtained from said work 
key table, and 

said second encryption means supplies to said 
multiplexing means said enciphered scramble 
key enciphered by said second encryption 
means as enciphered ECM data. 

40. A program distribution system according to claim 

39, wherein said encoder/multiplexer control sys- 
tem assigns to all transport stream packets sup- 
plied to said multiplexer system in the form of 
transport stream packets, packet IDs for identifying 
said transport stream packets. 

41. A program distribution system according to claim 

40, wherein said program specific information con- 
sists of at least a program association table, a pro- 
gram map table, and a conditional access table. 

42. A program distribution system according to claim 

41, wherein said encoder/multiplexer control sys- 
tem supplies to said multiplexer system a transport 
stream packet containing said program association 
table as a PAT packet, 

said encoder/multiplexer control system sup- 
plies to said multiplexer system a transport 
stream packet containing said program map 
table as a PMT packet, and 
said encoder/multiplexer control system sup- 
plies to said multiplexer system a transport 
stream packet containing said conditional 



which controls said encoder system and said 
multiplexer system to multiplex said transport 
stream packet containing said plurality of data 40 
elements constituting said program, said trans- 
port stream packet containing said ECM data, 
and said transport stream packet containing 
said EMM data according to said program spe- 
cific information. 45 



50 



said subscriber authorization system supplies 
to said multiplexer system said enciphered 
EMM data and said ECM data as enciphered ss 
EMM packets and ECM packets in the form of 
transport stream packets, respectively and 
said encoder/multiplexer control system sup- 
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access table as a CAT packet. 

43. A program distribution system according to claim 

42, wherein said program association table is a 
table for specifying a program number and the s 
packet ID of a PMT packet corresponding to said 
program number, 

said program map table is a table for specifying 
the packet ID of a transport stream packet con- io 
taining each of a plurality of data elements con- 
stituting a program, and 
said conditional access table is a table for 
specifying the packet ID of said enciphered 
EMM packet. is 

44. A program distribution system according to claim 

43, wherein said program association table 
describes the program number for indicating a pro- 
gram and the packet ID of a PMT packet associated 20 
with said program, and 

said program map table describes the program 
number for indicating said program, a plurality 
of packet I Ds containing transport stream pack- 25 
ets containing a plurality of data elements con- 
stituting said program, and a descriptor for 
specifying the packet ID of an enciphered ECM 
packet associated with said program or said 
data element. 30 

45. A program distribution system according to claim 

44, wherein if said descriptor in said program map 
table is described at a location corresponding to 
said program number, said descriptor specifies the 35 
packet ID of an ECM packet containing a scramble 
key for scrambling all data elements of said plurality 

of data elements constituting said program, and 

if said descriptor in said program map table is 40 
described at a location corresponding to each 
of said data elements of said program, said 
descriptor specifies the packet IDs of a plurality 
of ECM packets containing a plurality of scram- 
ble keys for scrambling said plurality of data 45 
elements constituting said program, respec- 
tively 

46. A program distribution system according to claim 

45, wherein if said program has a first data element so 
through an n th data element and the same scram- 
ble key is specified for said first data element 
through said n'th data element, 

said program map table describes the corre- ss 
spondence between the program number for 
indicating said program and the packet IDs of 
ECM packets containing scramble keys for 



scrambling said first data element through said 
n'th data element, respectively. 

47. A program distribution system according to claim 
45, wherein if said program has a first data element 
through an n'th data element and at least one differ- 
ent scramble key is specified for said first data ele- 
ment through said n th data element, 

said program map table describes the corre- 
spondence between the packet ID of a trans- 
port stream packet containing said first data 
element and the packet ID of a transport 
stream packet containing ECM data containing 
a scramble key for scrambling said first data 
element, and 

said program map table describes the corre- 
spondence between the packet ID of a trans- 
port stream packet containing said n'th data 
element and the packet ID of a transport 
stream packet containing ECM data containing 
a scramble key for scrambling said n'th data 
element. 

48. A program distribution system according to claim 
42, wherein said encoder/multiplexer control sys- 
tem specifies unique packet IDs for said program 
map table and said conditional access table. 

49. A program distribution system according to claim 
42, wherein said scramble means does not scram- 
ble said program specific information, said EMM 
data, and said ECM data but scrambles only said 
data elements. 

50. A program distribution system according to claim 
42, wherein said scramble means scrambles said 
data elements by using scramble keys specified for 
said data elements based on a table which shows 
the correspondence between the packet ID of a 
transport stream packet containing each of said 
data elements and a scramble key specified for said 
data element. 

51. A program distribution system according to claim 
42, wherein said encoder/multiplexer control sys- 
tem stores packet IDs used for previous operations 
so that repetitive assignment at a packet ID to a plu- 
rality of transport stream packets can be avoided 
when packet IDs are specified to identify said ECM 
packet, said EMM packet, said RSI packet, and said 
elementary packet, respectively 

52. A program distribution system according to claim 
42, wherein said encoder/multiplexer control sys- 
tem generates a table which shows the correspond- 
ence between the packet ID assigned to each 
transport stream packet and a scramble key used 
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for scrambling data contained in said transport 
stream packet, and 

said encoder/multiplexer control system sup- 
plies to said multiplexer system said table for s 
showing the correspondence between said 
packet IDs and said scramble keys. 

53. A program distribution system according to claim 

52, wherein said scramble means does not scram- io 
ble said program specific information, said EMM 
data, and said ECM data but scrambles only said 
data elements by referencing said table for showing 
the correspondence between said packet IDs and 
said scramble keys. is 

54. A program distribution system according to claim 
52, wherein said scramble means scrambles said 
data elements with scramble keys specified for said 
data elements by referencing said table for showing 20 
the correspondence between said packet IDs and 
said scramble keys. 

55. A program distribution system according to claim 

52, wherein said scramble means detects the 25 
packet IDs of all transport stream packets supplied 
by said multiplexing means to said scramble 
means, 

said scramble means determines whether 30 
scramble keys are defined for said detected 
packet IDs based an said table which shows 
the correspondence between said packet IDs 
and said scramble keys, 

If some scramble keys are defined for said 35 
packet IDs, said scramble means scrambles 
data elements contained in transport stream 
packets indicated by said packet IDs with said 
defined scramble keys, and 
If no scramble keys are defined for said packet 40 
IDs, said scramble means does not scramble 
data contained in transport stream packets 
Indicated by said packet IDs. 

56. A program distribution system according to claim 45 
36, wherein said multiplexer system further com- 
prises: 

a second encryption means for enciphering 
said scramble keys, and so 
a plurality of buffer means for buffering said 
PAT packets, said PMT packets, said CAT 
packets, said transport stream packets contain- 
ing said data elements, said enciphered EMM 
packets, and said enciphered ECM packets, ss 
respectively, and for providing said transport 
stream packets to said multiplexing means. 
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57. A program distribution system according to claim 
56, wherein said multiplexer system monitors free 

area of a plurality of buffers for buffering said trans- 
port stream packets containing said data elements, 
and 

if any of said plurality of buffers for buffering 
said transport stream packets containing said 
data elements is likely to overflow, said EMM 
packets are not provided to said multiplexing 
means by a buffer for buffering said EMM pack- 
ets and Instead, said transport stream packets 
containing said data elements are provided to 
said multiplexing means by said buffer likely to 
overflow. 

58. A program distribution system according to claim 
47, further comprising: 

a distribution system for distributing transport 
streams provided by said multiplexer system to 
the receiving end through a transmission line, 
and 

a reception system for receiving said transport 
streams transmitted through said transmission 
line. 

59. A program distribution system according to claim 

58, wherein said reception system comprises: 

a demultiplexer for demultiplexing said trans- 
mitted transport streams, 
a descrambler for descrambling said scrambled 
data elements with said supplied scramble 
keys, respectively, 

a decoder for decoding said descrambled data 
for each data element, 

a CPU for analyzing transport stream packets 
constituting said transport stream, and 
a security module for deciphering said enci- 
phered scramble key contained in said trans- 
port stream and supplying said deciphered 
scramble key to said descrambler. 

60. A program distribution system according to claim 

59, wherein said CPU comprises: 

a PAT analyzing means for analyzing a pro- 
gram association table contained In said trans- 
port stream, 

a PMT analyzing means for analyzing a pro- 
gram map table contained in said transport 
stream, 

a CAT analyzing means for analyzing a condi- 
tional access table contained in said transport 
stream, 

an EMM analyzing means for analyzing enci- 
phered EMM data contained in said transport 
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Stream, and 

an ECM analyzing means for analyzing enci- 
phered ECM data cx)ntained in said transport 
stream. 

5 

61. A program distribution system according to claim 
59, wherein said security module comprises: 

a memory means for storing a subscriber's 
subscription information contained in said io 
EMM data, 

a first decryption means for receiving said enci- 
phered work key contained in said transmitted 
transport stream as well as the same master 
key as that used by said subscriber manage- is 
ment system to decipher said enciphered work 
key with said master key, and 
a second decryption means for receiving said 
enciphered scramble key contained in said 
transport stream as well as said deciphered 20 
work key supplied by said first decryption 
means to decipher said enciphered scramble 
key with said deciphered work key. 

62. A program distribution system according to claim 25 

61, wherein said CPU identifies a transport stream 
packet containing each of data elements constitut- 
ing said program by analyzing a program associa- 
tion table and a program map table contained in 
said transport stream and controls said demuiti- 30 
plexer to provide said transport stream packet con- 
taining said data element to appropriate one of said 
scramblers. 

63. A program distribution system according to claim 35 

62, wherein said CPU detects a transport stream 
packet containing EMM data by analyzing a condi- 
tional access table contained in said transport 
stream, 

40 

said CPU filters, from said transport stream 
containing said EMM data, only a transport 
stream packet having EMM data on a program 
subscribed for by a subscriber, and 
said CPU obtains said enciphered work key 45 
from said EMM data by analyzing said EMM 
data contained in said filtered transport stream 
packet. 

64. A program distribution system according to claim so 
61, wherein said CPU detects transport stream 
packets containing a plurality of data elements con- 
stituting said program and said ECM data, respec- 
tively, by analyzing a program association table 
contained in said transport stream and a program ss 
map table specified by said program association 
table, and 



said CPU controls said demultiplexer to supply 
said transport stream packets containing said 
plurality of data elements to said descramblers, 
respectively, and to receive said transport 
stream packet containing said ECM data. 

65. A program distribution system according to claim 

64, wherein said CPU filters, from said transport 
stream packets containing said enciphered ECM 
data supplied by said demultiplexer, only a trans- 
port stream packet having enciphered ECM data on 
a program or data element subscribed for by a sub- 
scriber, and 

said CPU obtains said enciphered scramble 
key from said enciphered ECM data by analyz- 
ing said enciphered ECM data contained in 
said filtered transport stream packet. 

66. A program distribution system according to claim 

65, wherein if the correspondence between said 
program number and the packet ID of said enci- 
phered ECM packet is described according to the 
syntax of said program map table, 

said CPU supplies to said security module an 
enciphered scramble key contained in said 
enciphered ECM packet specified by said 
packet ID as an enciphered scramble key cor- 
responding to said program, and 
if the correspondence between a plurality of 
data elements constituting said program and 
the packet IDs of said plurality of enciphered 
ECM packets is described according to the 
syntax of said program map table, 
said CPU supplies to said security module a 
plurality of different scramble keys contained in 
said enciphered ECM packets specified by said 
plurality of packet IDs as enciphered scramble 
keys corresponding to said plurality of data ele- 
ments. 

67. A program distribution system according to claim 

66, wherein if an enciphered scramble key associ- 
ated with said program is supplied by said CPU, 
said security module deciphers said supplied enci- 
phered scramble key to supply the same scramble 
key to a plurality of descramblers con-esponding to 
a plurality of data elements constituting said pro- 
gram, respectively, and 

if a plurality of enciphered scramble keys asso- 
ciated with said plurality of data elements are 
supplied by said CPU, said security module 
deciphers said plurality of supplied enciphered 
scramble keys, respectively, to supply different 
scramble keys to a plurality of descramblers 
corresponding to subscribed data elements 
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among said plurality of data elements. 

68. A program transmission system for transmitting a 
program consisting of a plurality of data elements, 
said program transmission system comprising: s 

a subscriber authorization system for generat- 
ing a plurality of scramble keys to be used for 
scrambling a plurality of data elements con- 
tained in said program so that a subscriber can io 
watch and/or hear only programs or data ele- 
ments subscribed for by said subscriber, 
a multiplexer system comprising: 

an encoding system for encoding each of is 
said data elements contained in said pro- 
gram to generate encoded streams con- 
sisting of encoded data elements for each 
program, 

a multiplexing means for multiplexing said 20 
encoded streams provided for each pro- 
gram by said encoding system, and 
a scramble means for selectively scram- 
bling each of said encoded data elements 
contained in said multiplexed stream 25 
based on said scramble key generated by 
said subscriber authorization system, and 



a subscriber management system for manag- 
ing subscribers' subscriptions for each data 
element and for accounting to said subscribers 
based on the data elements subscribed for by 
them, 

a subscriber authorization system for generat- 
ing a plurality of scramble keys to be used for 
scrambling each of said data elements con- 
tained in said program so that a subscriber can 
watch and/or hear only data elements sub- 
scribed for by said subscriber, and 
a multiplexer system comprising: 

an encoding system for encoding each of 
said data elements contained in said pro- 
gram to generate encoded streams con- 
sisting of encoded data elements for each 
program, 

a multiplexing means for multiplexing said 
encoded streams provided for each pro- 
gram by said encoding system, and 
a scramble means for selectively scram- 
bling each of said encoded data elements 
contained in said multiplexed stream 
based on said plurality of scramble keys 
generated by said subscriber authorization 
system. 



a transmission system for transmitting a stream 
multiplexed by said multiplexer system. 

69. A program transmission system for transmitting a 
plurality of programs each consisting of a plurality 
of data elements, said program transmission sys- 
tem comprising: 

a scramble key generation means for generat- 
ing a scramble key corresponding to each of 
said data elements. 

an encoding means for encoding each of said 
data elements contained in said plurality of pro- 
grams to generate encoded streams consisting 
of encoded data elements for each program, 
a multiplexing means for multiplexing said 
encoded streams provided for each program by 
said encoding means to generate a multiplexed 
stream, 

a scramble means for scrambling each of said 
encoded data elements contained in said mul- 
tiplexed stream based on said scramble key 
generated by said scramble key generation 
means, and 

a transmission system for transmitting said 
scrambled multiplexed stream. 

70. A pay broadcast system for broadcasting a program 
consisting of a plurality of data elements, said pay 
broadcast system comprising: 



71. A program transmission method for transmitting a 
30 program consisting of a plurality of data elements, 

said method comprising: 

a scramble key generation step for generating 
a plurality of scramble keys to be used for 

35 scrambling a plurality of data elements con- 

tained in said program so that a subscriber can 
watch and/or hear only programs or data ele- 
ments subscribed for by said subscriber, 
an encoding step for encoding each of said 

40 data elements contained in said program to 

generate encoded streams consisting of 
encoded data elements for each program, 
a multiplexing step for multiplexing said 
encoded streams provided for each program by 

45 said encoding step, and 

a scramble step for selectively scrambling each 
of said encoded data elements contained in 
said multiplexed stream based on said gener- 
ated scramble key 

50 

72. A program transmission method according to claim 
71, wherein said scramble key generation step 
enciphers with a master key a work key used for 
enciphering said scramble key, 

55 

said scramble key generation step provides 
said enciphered work key and a subscriber 
identification number for identifying said sub- 
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scramble key enciphered by said second 
encryption circuit as enciphered EClVI data. 

78. A program transmission method according to claim 
5 77, wherein said program specific information gen- 
eration step assigns to all transport stream packets 
supplied to said multiplexer system in the form of 
transport stream packets, packet IDs for identifying 
said transport stream packets. 

10 

79. A program transmission method according to claim 

78, wherein said program specific information con- 
sists of at least a program association table, a pro- 
gram map table, and a conditional access table. 

15 

80. A program transmission method according to claim 

79, wherein said program specific information gen- 
eration step supplies to said multiplexer system a 
transport stream packet containing said program 

20 association table as a PAT packet, 



scriber as enciphered EMM data, and 
said scramble key generation step provides a 
work key identification number for identifying 
said enciphered work key and said scramble 
key as ECM data. 

73. A program transmission method according to claim 

72, further comprising a program specific informa- 
tion generation step for generating a program spe- 
cific information for indicating how to multiplex said 
plurality of programs, said plurality of data elements 
constituting said programs, said plurality of ECM 
data streams, and said plurality of EMM data 
streams, and 

said multiplexing step multiplexes said plurality 
of programs, said plurality of data elements, 
said plurality of ECM data streams, and said 
plurality of EMM data streams according to 
said generated program specific information. 

74. A program transmission method according to claim 

73, wherein said scramble key generation step pro- 
vides said enciphered EMM data and said ECM 
data as enciphered EMM packets and ECM pack- 
ets in the form of transport stream packets, respec- 
tively 

said encoding step provides said encoded data 

elements as elementary packets in the form of 

transport stream packets, and 

said program specific information generation 

step provides said program specific information 

as PSI packets in the form of transport stream 

packets. 

75. A program transmission method according to claim 

74, wherein said multiplexing step comprises an 
encryption step for enciphering a scramble key con- 
tained in said ECM data. 

76. A program transmission method according to claim 

75, wherein said scramble key generation step gen- 
erates a work key table which shows the corre- 
spondence between said work key and a work key 
identification number for identifying said work key. 

77. A program transmission method according to claim 

76, wherein said encryption step in said multiplec- 
ing step obtains a work key from said work key 
identification number contained in said ECM data 
by referencing said work key table, 

said encryption step enciphers said scramble 
key contained in said ECM data by using said 
work key obtained from said work key table, 
and 

said encryption step provides said enciphered 



said program specific information generation 
step supplies to said multiplexer system a 
transport stream packet containing said pro- 
25 gram map table as a PMT packet, and 

said program specific information generation 
step supplies to said multiplexer system a 
transport stream packet containing said condi- 
tional access table as a CAT packet. 

30 

81. A program transmission method according to claim 

80. wherein said program association table is a 
table for specifying a program number and the 
packet ID of a PMT packet corresponding to said 

35 program number, 

said program map table is a table for specifying 
the packet ID of a transport stream packet con- 
taining each of a plurality of data elements con- 
40 stituting a program, and 

said conditional access table is a table for 
specifying the packet ID of said enciphered 
EMM packet. 

45 82. A program transmission method according to claim 

81, wherein said program association table 
describes the program number for indicating a pro- 
gram and the packet ID of a PMT packet associated 
with said program, and 

50 

said program map table describes the program 
number for indicating said program, a plurality 
of packet IDs containing transport stream pack- 
ets containing a plurality of data elements con- 
55 stituting said program, and a descriptor for 

specifying the packet ID of an enciphered ECM 
packet associated with said program or said 
data element. 
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83. A program transmission method according to claim 
82, wherein if said descriptor in said program map 
table is described at a location corresponding to 
said program number, said descriptor specifies the 
packet ID of an ECM packet containing a scramble 
key for scrambling all data elements of said plurality 
of data elements constituting said program, and 

if said descriptor in said program map table is 
described at a location corresponding to each 
of said data elements of said program, said 
descriptor specifies the packet IDs of a plurality 
of ECM packets containing a plurality of scram- 
ble keys for scrambling said plurality of data 
elements constituting said program, respec- 
tively 



step supplies to said multiplexer system said 
table for showing the correspondence between 
said packet IDs and said scramble keys. 

5 87. A program transmission method according to claim 
86, wherein said scramble means does not scram- 
ble said program specific information, said EMM 
data, and said ECM data but scrambles only said 
data elements by referencing said table for showing 

10 the correspondence between said packet IDs and 
said scramble keys. 

88. A program transmission method according to claim 
86, wherein said scramble step detects the packet 
15 IDs of all transport stream packets supplied by said 
multiplexing means to said scramble means, 



84. A program transmission method according to claim 
83, wherein if said program has a first data element 
through an n'th data element and at least one differ- 
ent scramble key is specified for said first data ele- 
ment through said n'th data element, 

said program map table describes the corre- 
spondence between the packet ID of a trans- 
port stream packet containing said first data 
element and the packet ID of a transport 
stream packet containing ECM data containing 
a scramble key for scrambling said first data 
element, and 

said program map table describes the corre- 
spondence between the packet ID of a trans- 
port stream packet containing said nth data 
element and the packet ID of a transport 
stream packet containing ECM data containing 
a scramble key for scrambling said n'th data 
element. 

85. A program transmission method according to claim 
80, wherein said scramble step does not scramble 
said program specific information, said EMM data, 
and said ECM data but scrambles only said data 
elements by using scramble keys specified for said 
data elements based on a table which shows the 
correspondence between the packet ID of a trans- 
port stream packet containing each of said data ele- 
ments and a scramble key specified for said data 
element. 



said scramble step determines whether scram- 
ble keys are defined for said detected packet 
20 IDs based on said table which shows the corre- 

spondence between said packet IDs and said 
scramble keys, 

if some scramble keys are defined for said 
packet IDs, said scramble step scrambles data 

25 elements contained in transport stream pack- 

ets indicated by said packet IDs with said 
defined scramble keys, and 
if no scramble keys are defined for said packet 
IDs, said scramble step does not scramble data 

30 contained in transport stream packets indi- 

cated by said packet IDs. 

89. A program transmission method according to claim 
74, wherein said multiplexing step enciphers said 

35 scramble keys with said work key, and 

said multiplexing step buffers said PAT packets, 
said PMT packets, said CAT packets, said 
transport stream packets containing said data 
40 elements, said enciphered EMM packets, and 

said enciphered ECM packets in a plurality of 
buffer means, respectively 

90. A program transmission method according to claim 
45 89, wherein said multiplexing step monitors free 

area of a plurality of buffers for buffering said trans- 
port stream packets containing said data elements, 
and 



86. A program transmission method according to claim 
80, wherein said program specific information gen- 
eration step generates a table which shows the cor- 
respondence between the packet ID assigned to 
each transport stream packet and a scramble key 
used for scrambling data contained in said trans- 
port stream packet, and 

said program specific information generation 



50 if any of said plurality of buffers for buffering 

said transport stream packets containing said 
data elements is likely to overflow, said EMM 
packets are not provided to said multiplexing 
means by a buffer for buffering said EMM pack- 

55 ets and instead, said transport stream packets 

containing said data elements are provided by 
said buffer likely to overflow. 
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91. A conditional access system for providing a condi- 
tional access to only subscribed programs and data 

elements among a plurality of programs and a plu- 
rality of data elements constituting said programs 
distributed by a program distribution system, said 5 
conditional access system comprising: 

a demultiplexer means for demultiplexing, from 
said transport stream, a transport stream 
packet containing a plurality of scrambled data 10 
elements constituting said program and for 
demultiplexing a plurality of transport stream 
packets containing a plurality of enciphered 
scramble keys associated with said plurality of 
data elements, 15 
a filter means for filtering, from said plurality of 
transport stream packets containing said plu- 
rality of demultiplexed enciphered scramble 
keys, a transport stream packet containing an 
enciphered scramble key associated with said 20 
programs and data elements subscribed for by 
a subscriber, 

a decryption means for deciphering said plural- 
ity of enciphered scramble keys contained in 
said plurality of filtered transport stream pack- 25 
ets to generate a plurality of deciphered scram- 
ble keys, 

a descramble means for descrambling said plu- 
rality of demultiplexed data elements for each 
data element by using said plurality of deci- 30 
phered scramble keys associated with said plu- 
rality of data elements, and 
a decoding means for decoding said plurality of 
data elements descrambled by said descram- 
ble means. 35 

92. A conditional access system according to claim 91 , 
wherein said program distribution system com- 
prises: 

40 

a subscriber management system for manag- 
ing subscribers' subscriptions for each program 
or data element, 

a subscriber authorization system for generat- 
ing a plurality of scramble keys to be used for 45 
scrambling each of said data elements con- 
tained in said program so that a subscriber can 
watch and/or hear only data programs or ele- 
ments subscribed for by said subscriber, 
a multiplexer system comprising: so 

an encoding system for encoding each of 
said data elements contained in said pro- 
gram to generate encoded streams con- 
sisting of encoded data elements for each ss 
program, 

a multiplexing means for multiplexing said 
encoded streams generated for each pro- 



gram by said encoding system, and 
a scramble means for selectively scram- 
bling each of said encoded data elements 
contained in said multiplexed stream 
based on said scramble key generated by 
said subscriber authorization system, and 

a transmission system for transmitting a stream 
multiplexed by said multiplexer system. 

93. A conditional access system according to claim 92, 
wherein said subscriber authorization system com- 
prises a first encryption means for enciphering a 
work key used for enciphering said scramble key 
with a master key, 

said subscriber authorization system supplies 
to said multiplexer system an enciphered work 
key enciphered by said first encryption means 
and a subscriber identification number for iden- 
tifying said subscriber as enciphered EMM 
data, and 

said subscriber authorization system supplies 
to said multiplexer system a work key identifica- 
tion number for identifying said enciphered 
work key enciphered by said encryption means 
and said scramble key as ECM data. 

94. A conditional access system according to claim 93, 
comprising an encoder/multiplexer control system 
which generates a program specific information for 
indicating how to multiplex said plurality of pro- 
grams, said plurality of data elements constituting 
said programs, said plurality of ECM data streams, 
and said plurality of EMM data streams, and con- 
trols said encoder system and said multiplexer sys- 
tem to multiplex said plurality of programs, said 
plurality of data elements, said plurality of ECM 
data streams, and said plurality of EMM data 
streams according to said generated program spe- 
cific information. 

95. A conditional access system according to claim 94, 
wherein said encoder system supplies to said mul- 
tiplexer system said encoded data elements as ele- 
mentary packets in the form of transport stream 
packets, 

said subscriber authorization system supplies 
to said multiplexer system said enciphered 
EMM data and said ECM data as enciphered 
EMM packets and ECM packets in the form of 
transport stream packets, respectively, and 
said encoder/multiplexer control system sup- 
plies to said multiplexer system said program 
specific information as PS I packets in the form 
of transport stream packets. 
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96. A conditional access system according to claim 95, 
wherein said multiplexer system further comprises 
a second encryption means for enciphering a 
scramble key contained in said EClVI data. 

5 

97. A conditional access system according to claim 96, 
wherein said subscriber authorization system sup- 
plies to said second encryption means of said mul- 
tiplexer system a work key table which shows the 
correspondence between said work key and a work io 
key identification number for identifying said work 
key 

98. A conditional access system according to claim 97, 
wherein said second encryption means obtains a is 
work key from said work key identification number 
contained in said ECM data by referencing said 
work key table, 

said second encryption means enciphers said 20 
scramble key contained in said ECM data by 
using said work key obtained from said work 
key table, and 

said second encryption means supplies to said 
multiplexing means said enciphered scramble 25 
key enciphered by said second encryption 
means as enciphered ECM data. 

99. A conditional access system according to claim 98, 
wherein said encoder/multiplexer control system 30 
assigns to all transport stream packets supplied to 
said multiplexer system in the form of transport 
stream packets, packet IDs for identifying said 
transport stream packets. 

35 

100. A conditional access system according to claim 99, 
wherein said program specific information consists 
of at least a program association table, a program 
map table, and a conditional access table. 

40 

101 .A conditional access system according to claim 

100, wherein said encoder/multiplexer control sys- 
tem supplies to said multiplexer system a transport 
stream packet containing said program association 
table as a PAT packet, 45 

said encoder/multiplexer control system sup- 
plies to said multiplexer system a transport 
stream packet containing said program map 
table as a PMT packet, and so 
said encoder/multiplexer control system sup- 
plies to said multiplexer system a transport 
stream packet containing said conditional 
access table as a CAT packet. 

55 

102. A conditional access system according to claim 

101, wherein said program association table is a 
table for specifying a program number and the 



packet ID of a PMT packet corresponding to said 
program number, 

said program map table is a table for specifying 
the packet ID of a transport stream packet con- 
taining each of a plurality of data elements con- 
stituting a program, and 
said conditional access table is a table for 
specifying the packet ID of said enciphered 
EMM packet. 

103. A conditional access system according to claim 

102, wherein said program association table 
describes the program number for indicating a pro- 
gram and the packet ID of a PMT packet associated 
with said program, and 

said program map table describes the program 
number for indicating said program, a plurality 
of packet IDs containing transport stream pack- 
ets containing a plurality of data elements con- 
stituting said program, and a descriptor for 
specifying the packet ID of an enciphered ECM 
packet associated with said program or said 
data element. 

104. A conditional access system according to claim 

103, wherein if said descriptor in said program map 
table is described at a location corresponding to 
said program number, said descriptor specifies the 
packet ID of an ECM packet containing a scramble 
key for scrambling all data elements of said plurality 
of data elements constituting said program, and 

if said descriptor in said program map table is 
described at a location corresponding to each 
of said data elements of said program, said 
descriptor specifies the packet IDs of a plurality 
of ECM packets containing a plurality of scram- 
ble keys for scrambling said plurality of data 
elements constituting said program, respec- 
tively 

105. A conditional access system according to claim 

104, wherein if said program has a first data ele- 
ment through an n'th data element and at least one 
different scramble key is specified for said first data 
element through said n'th data element, 

said program map table describes the corre- 
spondence between the packet ID of a trans- 
port stream packet containing said first data 
element and the packet ID of a transport 
stream packet containing ECM data containing 
a scramble key for scrambling said first data 
element, and 

said program map table describes the corre- 
spondence between the packet ID of a trans- 
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port stream packet containing said nth data 
element and the packet ID of a transport 

stream packet containing ECM data containing 
a scramble key for scrambling said n'th data 
element. 5 

106. A conditional access system according to claim 
101, wherein said scramble means does not scram- 
ble said program specific information, said EMM 
data, and said ECM data but scrambles only said 10 
data elements by using scramble keys specified for 
said data elements based on a table which shows 
the correspondence between the packet ID of a 
transport stream packet containing each of said 
data elements and a scramble key specified for said 15 
data element. 

107. A conditional access system according to claim 
101, wherein said encoder/multiplexer control sys- 
tem generates a table which shows the correspond- 20 
ence between the packet ID assigned to each 
transport stream packet and a scramble key used 

for scrambling data contained in said transport 
stream packet, and 

25 

said encoder/multiplexer control system sup- 
plies to said multiplexer system said table for 
showing the correspondence between said 
packet IDs and said scramble keys. 

30 

108. A conditional access system according to claim 
1 07, wherein said scramble means does not scram- 
ble said program specific information, said EMM 
data, and said ECM data but scrambles only said 
data elements by referencing said table for showing 35 
the correspondence between said packet IDs and 
said scramble keys. 

109. A conditional access system according to claim 
107, wherein said scramble means detects the 40 
packet IDs of all transport stream packets supplied 

by said multiplexing means to said scramble 
means, 

said scramble means determines whether 45 
scramble keys are defined for said detected 
packet IDs based on said table which shows 
the correspondence between said packet IDs 
and said scramble keys, 

if some scramble keys are defined for said so 
packet IDs, said scramble means scrambles 
data elements contained in transport stream 
packets indicated by said packet IDs with said 
defined scramble keys, and 
if no scramble keys are defined for said packet ss 
IDs, said scramble means does not scramble 
data contained in transport stream packets 
indicated by said packet IDs. 
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1 10. A conditional access system according to claim 95, 
wherein said multiplexer system further comprises: 

a second encryption means for enciphering 
said scramble keys, and 
a plurality of buffer means for buffering said 
PAT packets, said PMT packets, said CAT 
packets, said transport stream packets contain- 
ing said data elements, said enciphered EMM 
packets, and said enciphered ECM packets, 
respectively, and for providing said transport 
stream packets to said multiplexing means. 

111. A conditional access system according to claim 
110, wherein said multiplexer system monitors free 
area of a plurality of buffers for buffering said trans- 
port stream packets containing said data elements, 
and 

if any of said plurality of buffers for buffering 

said transport stream packets containing said 
data elements is likely to overflow, said EMM 
packets are not provided to said multiplexing 
means by a txiffer for buffering said EMM pack- 
ets and instead, said transport stream packets 
containing said data elements are provided to 
said multiplexing means by said buffer likely to 
overflow. 

11 2. A conditional access system according to claim 
109, wherein said filter means comprises: 

a PAT analyzing means for analyzing a pro- 
gram association table contained in said trans- 
port stream, 

a PMT analyzing means for analyzing a pro- 
gram map table contained in said transport 
stream, 

a CAT analyzing means for analyzing a condi- 
tional access table contained in said transport 
stream, 

an EMM analyzing means for analyzing enci- 
phered EMM data contained in said transport 
stream, and 

an ECM analyzing means for analyzing enci- 
phered ECM data contained in said transport 
stream. 

11 3. A conditional access system according to claim 
109, wherein said decryption means comprises: 

a memory means for storing a subscriber's 
subscription information contained in said 
EMM data, 

a first decryption means for receiving said enci- 
phered work key contained in said transmitted 
transport stream as well as the same master 
key as that used by said subscriber manage- 
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ment system to decipher said enciphered work 
key with said master key, and 
a second decryption means for receiving said 
enciphered scramble key contained in said 
transport stream as well as said deciphered s 
work key supplied by said first decryption 
means to decipher said enciphered scramble 
key with said deciphered work key. 

11 4. A conditional access system according to claim io 

1 13, wherein said demultiplexer means and said fil- 
ter means identify a transport stream packet con- 
taining each of data elements constituting said 
program by analyzing a program association table 
and a program map table contained In said trans- is 
port stream and control said demultiplexer to pro- 
vide said transport stream packet containing said 
data element to appropriate one of said scramblers. 

115. A conditional access system according to claim 20 

1 14, wherein said demultiplexer means and said fil- 
ter means detect a transport stream packet contain- 
ing EMM data by analyzing a conditional access 
table contained in said transport stream, 

25 

said demultiplexer means and said filter means 
filter, from said transport stream containing 
said EMM data, only a transport stream packet 
having EMM data on a program subscribed for 
by a subscriber, and 30 
said demultiplexer means and said filter means 
obtain said enciphered work key from said 
EMM data by analyzing said EMM data con- 
tained in said filtered transport stream packet. 

35 

11 6. A conditional access system according to claim 
113, wherein said demultiplexer means and said fil- 
ter means detect transport stream packets contain- 
ing a plurality of data elements constituting said 
program and said ECM data, respectively, by ana- 40 
lyzing a program association table contained in said 
transport stream and a program map table speci- 
fied by said program association table, and 

said demultiplexer means and said filter means 45 
control said demultiplexer to supply said trans- 
port stream packets containing said plurality of 
data elements to said descramblers, respec- 
tively and to receive said transport stream 
packet containing said ECM data. so 

117. A conditional access system according to claim 
116, wherein said demultiplexer means and said fil- 
ter means filter, from said transport stream packets 
containing said enciphered ECM data supplied by ss 
said demultiplexer, only a transport stream packet 
having enciphered ECM data on a program or data 
element subscribed for by a subscriber, and 



said demultiplexer means and said filter means 
obtain said enciphered scramble key from said 
enciphered ECM data by analyzing said enci- 
phered ECM data contained in said filtered 
transport stream packet. 

118. A conditional access system according to claim 

1 1 7, wherein if the correspondence between said 
program number and the packet ID of said enci- 
phered ECM packet Is described according to the 
syntax of said program map table, 

said filter means supplies to said decryption 
means an enciphered scramble key contained 
In said enciphered ECM packet specified by 
said packet ID as an enciphered scramble key 
corresponding to said program, and 
if the correspondence between a plurality of 
data elements constituting said program and 
the packet IDs of said plurality of enciphered 
ECM packets is described according to the 
syntax of said program map table, 
said filter means supplies to said decryption 
means a plurality of different scramble keys 
contained in said enciphered ECM packets 
specified by said plurality of packet IDs as enci- 
phered scramble keys corresponding to said 
plurality of data elements. 

119. A conditional access system according to claim 

118, wherein if an enciphered scramble key associ- 
ated with said program is supplied by said filter 
means, said decryption means deciphers said sup- 
plied enciphered scramble key to supply the same 
scramble key to a plurality of descramblers corre- 
sponding to a plurality of data elements constituting 
said program, respectively and 

if a plurality of enciphered scramble keys asso- 
ciated with said plurality of data elements are 
supplied by said filter means, said decryption 
means deciphers said plurality of supplied 
enciphered scramble keys, respectively, to sup- 
ply different scramble keys to a plurality of 
descramblers corresponding to subscribed 
data elements among said plurality of data ele- 
ments. 

120. A data reception device for receiving multiplexed 
data obtained by multiplexing transport stream 
packets of program data consisting of a plurality of 
data elements constructed in the form of transport 
stream packets, said data reception device com- 
prising: 

a scramble key extract means for extracting 
from said multiplexed data a scramble key cor- 
responding to each data element, and 
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a descramble means for descrambling said 
transport stream packet for each data element 

contained in said multiplexed data by using a 
scramble key extracted by said scramble key 
extract means. 5 

121 .A data reception device according to claim 120, 
wherein said data reception device comprises a 
first decryption means for deciphering said enci- 
phered scramble key extracted by said scramble io 
key extract means by using a work key received 
along with said multiplexed data and descrambles 
said transport stream packet by using said scram- 
ble key deciphered by said first decryption means. 

15 

122. A data reception device according to claim 120, 
wherein said data reception device comprises a 
second decryption means for deciphering said 
enciphered work key received along with said mul- 
tiplexed data by using a prestored master key and 20 
deciphers said scramble key by using said work key 
deciphered by said second decryption means. 
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